CVE-2021-31792

Description

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field

Affected packages (1)

• Bitnami/suitecrmfrom 0, < 7.11.19

CVSS scores

References (4)

• WEBhttps://chris-forbes.github.io/CVE-2021-31792
• WEBhttps://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_19
• WEBhttps://github.com/salesagility/SuiteCRM
• WEBhttps://nvd.nist.gov/vuln/detail/CVE-2021-31792