Cross-site Scripting (XSS) - Stored in salesagility/suitecrm-core

CVE-2023-3293

What is CVE-2023-3293?

A stored Cross-Site Scripting (XSS) vulnerability exists in SuiteCRM versions prior to 8.3.0. This flaw allows attackers to inject malicious scripts into the application, which can be executed by unsuspecting users accessing the compromised content. Exploiting this vulnerability can lead to unauthorized actions, data exfiltration, and session hijacking, undermining the integrity and security of the application.

References