CNNVD-202511-860 Information
Nov 08, 2025
cve
CNNVD ID
CNNVD-202511-860
Related CVE
- CNNVD Published: 2025-11-08
Description (Chinese)
SuiteCRM是SuiteCRM团队的一个客户关系管理系统。 SuiteCRM 7.14.7及之前版本存在跨站脚本漏洞，该漏洞源于未经验证的反射型跨站脚本，可能导致账户接管。
Description (English)
SuiteCRM is a customer relationship management system for the SuiteCRM team. SuiteCRM 7.14.7 and previous versions had a cross-site script loophole, which originated in unverified reflector-type cross-site scripts and could lead to the account taking over.
Hazard Level
High
Vulnerability Type
跨站脚本
Affected Vendor
SuiteCRM
Published
2025-11-08
Last Modified
2026-02-24
References
https://github.com/SuiteCRM/SuiteCRM/commit/40da2845a170832a4e9e9fa0ebe731f8c34de42d https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-prfm-6667-x3mv https://access.redhat.com/security/cve/cve-2025-64491
Patch
https://suitecrm.com/download/
Share on: