Description
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerability in the login page that allows attackers to inject arbitrary HTML content, enabling phishing attacks and page defacement. Version 7.15.1 patches the issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SuiteCRM | SuiteCRM | < 7.15.1 | — |
Advisories 1
- WID-SEC-2026-0792 SuiteCRM: Mehrere Schwachstellen BSI CERT-Bund (WID) · Mar 19, 2026