CVE-2021-41597: Salesagility Suitecrm

High severity, CVSS 8.8. EPSS: 1% chance of exploitation in the next 30 days.

SuiteCRM through 7.11.21 is vulnerable to CSRF, with resultant remote code execution, via the UpgradeWizard functionality, if a PHP file is included in a ZIP archive.

Affected products

• Salesagility Suitecrm: from 7.10.0, before 7.10.35 (fixed in 7.10.35); from 7.12, before 7.12.2 (fixed in 7.12.2)

Published 2022-01-12. Last modified 2026-06-17.