Skip to content
OpenAdvisories

Vendor

salesagility

40 known vulnerabilities.

Products

SuiteCRM 22 salesagility/suitecrm 14 salesagility/suitecrm-core 2 SuiteCRM-Core 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2024-50335 Public exploit

    Authenticated XSS in "Publish Key" Field Allowing Unauthorized Administrator User Creation in SuiteCRM

    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. The "Publish Key" field in SuiteCRM's Edit Profile page is vulnerable to Reflected Cross-Site Scripting (XSS), allowing an attacker to inject malicious J…

    salesagility SuiteCRM
  • High 8.6
    CVE-2024-36416 Public exploit

    SuiteCRM v4 API Excessive log data DOS

    SuiteCRM is an open-source Customer Relationship Management (CRM) software application. Prior to versions 7.14.4 and 8.6.1, a deprecated v4 API example with no log rotation allows denial of service by logging excessive data. Versions 7.14.4 and 8.6.1 contain …

    salesagility SuiteCRM
  • Medium 6.4
    CVE-2023-5350 Public exploit

    SQL Injection in salesagility/suitecrm

    SQL Injection in GitHub repository salesagility/suitecrm prior to 7.14.1.

    salesagility salesagility/suitecrm