CVE-2026-29100
SuiteCRM has Reflected HTML Injection in Login Page via default_user_name Parameter
Summary
SuiteCRM has Reflected HTML Injection in Login Page via default_user_name Parameter
Original description
The description as published by the source.
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerability in the login page that allows attackers to inject arbitrary HTML content, enabling phishing attacks and page defacement. Version 7.15.1 patches the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov