CVE-2026-100359

The SuiteCRM CRM application is vulnerable to blind SQL injection in the Project Template module's action_get_end_date function. The root cause is the direct interpolation of authenticated caller-controlled task_id and lag POST parameters into SQL queries without proper sanitization, parameteriza...