CVE-2020-8804: Salesagility Suitecrm

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

SuiteCRM through 7.11.10 allows SQL Injection via the SOAP API, the EmailUIAjax interface, or the MailMerge module.

Affected products

• Salesagility Suitecrm: up to and including 7.11.10

Published 2020-02-13. Last modified 2026-06-17.