CVE-2021-31792

2021-04-3022:15:07

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.6%

JSON

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field

CPENameOperatorVersion
suitecrmeq7.11.16
suitecrmeq7.6.3
suitecrmeq7.8.2
suitecrmeq7.8.4
suitecrmeq7.10.21
suitecrmeq7.9.15
suitecrmeq7.10-RC
suitecrmeq7.9.5
suitecrmeq7.10.0
suitecrmeq7.11.10

Name	Operator	Version
suitecrm	eq	7.11.16
suitecrm	eq	7.6.3
suitecrm	eq	7.8.2
suitecrm	eq	7.8.4
suitecrm	eq	7.10.21
suitecrm	eq	7.9.15
suitecrm	eq	7.10-RC
suitecrm	eq	7.9.5
suitecrm	eq	7.10.0
suitecrm	eq	7.11.10