SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.

Published Feb 13, 2020 · Updated Aug 4, 2024 · Assigned by mitre