CVE-2021-31792: Salesagility Suitecrm

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field

Affected products

• Salesagility Suitecrm: before 7.11.19 (fixed in 7.11.19)

Published 2021-04-30. Last modified 2026-06-17.