CVE-2026-69136

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, email template attachment handling passes the removeattachment POST parameter array through HTML-oriented securexss processing and directly interpolates its elements...

CVE-2026-69136

SuiteCRM is vulnerable to an Authenticated SQL Injection in the handleAttachments function prior to versions 7.15.2 and 8.10.2 . The root cause is that the remove_attachment POST parameter array is processed using HTML-oriented securexss() processing and then directly interpolated into an SQL UPD...