CVE-2024-36413 SuiteCRM authenticated Reflected Cross-Site Scripting

SuiteCRM is an open-source Customer Relationship Management CRM software application. Prior to versions 7.14.4 and 8.6.1, a vulnerability in the import module error view allows for a cross-site scripting attack. Versions 7.14.4 and 8.6.1 contain a fix for this issue...

CVE-2024-36413

SuiteCRM prior to versions 7.14.4 and 8.6.1 is affected by a cross-site scripting vulnerability in the import module error view. The underlying issue was fixed in 7.14.4 and 8.6.1. Connected sources consistently describe a reflected/XSS in the import error view and confirm a vendor-reported fix i...