high7.1
CVE-2026-29100
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.
Impact
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerability in the login page that allows attackers to inject arbitrary HTML content, enabling phishing attacks and page defacement. Version 7.15.1 patches the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Suitecrm | Suitecrm | before 7.15.1 |