SuiteCRM 7.10.x and 7.11.x before 7.10.20 and 7.11.8 has XSS.
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
Link | Tags |
---|---|
https://docs.suitecrm.com/admin/releases/7.11.x/#_7_11_8 | release notes vendor advisory |
https://docs.suitecrm.com/admin/releases/7.10.x/#_7_10_20 | release notes vendor advisory |