CVE-2020-17372: SugarCRM

Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days.

SugarCRM before 10.1.0 (Q3 2020) allows XSS.

Affected products

• SugarCRM SugarCRM: before 10.1.0 (fixed in 10.1.0)

Published 2020-08-12. Last modified 2026-06-17.