PT-2020-13934 · Salesagility · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM version 7.11.13 Description: The issue is related to stored Cross-Site Scripting XSS in the Documents preview functionality. This could allow remote authenticated attackers to inject arbitrary web script or HTML. Recommendations: For...

PT-2020-14341 · Salesagility · Suitecrm

Name of the Vulnerable Software and Affected Versions: SuiteCRM versions prior to 7.11.14 Description: The issue is related to an Open Redirect in the Documents module of SuiteCRM, which can be exploited via a crafted SVG document. Recommendations: For versions prior to 7.11.14, update to version...