CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF

EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...

CVE-2025-59428

CVE-2025-59428 affects EspoCRM up to version 9.1.8. A combination of stored SVG injection and missing CSRF protection allows an attacker with Knowledge Base edit permissions to cause arbitrary user creation (including admin accounts) by luring an authenticated user to click a malicious SVG link t...

CVE-2025-59428 EspoCRM allows arbitrary user creation via stored SVG injection and CSRF

EspoCRM is an open source customer relationship management application. In versions before 9.1.9, a vulnerability allows arbitrary user creation, including administrative accounts, through a combination of stored SVG injection and lack of CSRF protection. An attacker with Knowledge Base edit...

EspoCRM 跨站请求伪造漏洞

EspoCRM is an open source web-based customer relationship management CRM system from EspoCRM Open Source. The system provides features such as sales automation, community and customer support. A cross-site request forgery vulnerability exists in EspoCRM versions prior to 9.1.9, which stems from...

PT-2025-41935

Name of the Vulnerable Software and Affected Versions EspoCRM versions prior to 9.1.9 Description EspoCRM is a customer relationship management application. A flaw allows the creation of arbitrary user accounts, including those with administrative privileges. This is achieved through a combinatio...

EUVD-2014-7836

Malware in sbrugna...

EUVD-2018-9057

Malware in sbrugna...

EUVD-2019-5567

Malware in sbrugna...

EUVD-2019-5068

Malware in sbrugna...

EUVD-2019-5710

Malware in sbrugna...

EUVD-2018-9056

Malware in sbrugna...

EUVD-2019-5549

Malware in sbrugna...

EUVD-2019-5550

Malware in sbrugna...

EUVD-2014-7835

Malware in sbrugna...

EUVD-2019-5707

Malware in sbrugna...

EUVD-2019-5565

Malware in sbrugna...

EUVD-2019-5711

Malware in sbrugna...

EUVD-2019-5548

Malware in sbrugna...

EUVD-2019-5708

Malware in sbrugna...

EUVD-2014-8169

Malware in sbrugna...