CVE-2021-31792
XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field
Original description
The description as published by the source.
XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field
References
- advisory docs.suitecrm.com
- advisory github.com
- report chris-forbes.github.io