Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

CVE-2023-5351

What is CVE-2023-5351?

A stored Cross-site Scripting (XSS) vulnerability exists in SuiteCRM, impacting users prior to version 7.14.1. This security weakness allows an attacker to inject malicious scripts into the application, which can then be executed in the context of another user's browser, potentially leading to data theft, session hijacking, and other malicious activities. Developers are encouraged to update to the latest version to protect against this vulnerability and ensure the integrity of their applications.

References