Skip to content
OpenAdvisories

Vendor

MicroPyramid

4 known vulnerabilities.

Products

BottleCRM 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.5
    CVE-2026-110592

    BottleCRM 0.30 through 1.14.5 HTML Injection via Custom Invoice PDF Template

    BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render_invoice_template() that allows authenticated organization members to inject markup into custom-template invoice PDFs. Attackers can place HTML and CSS in notes, terms, client nam…

    MicroPyramid BottleCRM