CVE-2021-37221: Customer Relationship Management System Project Customer Relationship Management System

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A file upload vulnerability exists in Sourcecodester Customer Relationship Management System 1.0 via the account update option & customer create option, which could let a remote malicious user upload an arbitrary php file. .

Affected products

• Customer Relationship Management System Project Customer Relationship Management System: version 1.0 only

Published 2021-10-27. Last modified 2026-06-17.