CVE-2026-29100
SuiteCRM has Reflected HTML Injection in Login Page via default_user_name Parameter
Résumé
SuiteCRM has Reflected HTML Injection in Login Page via default_user_name Parameter
Description d'origine
La description telle que publiée par la source (souvent en anglais).
SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. SuiteCRM 7.15.0 contains a reflected HTML injection vulnerability in the login page that allows attackers to inject arbitrary HTML content, enabling phishing attacks and page defacement. Version 7.15.1 patches the issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov