CVE-2021-43130: Customer Relationship Management System Project Customer Relationship Management System

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

An SQL Injection vulnerability exists in Sourcecodester Customer Relationship Management System (CRM) 1.0 via the username parameter in customer/login.php.

Affected products

• Customer Relationship Management System Project Customer Relationship Management System: version 1.0 only

Published 2021-11-03. Last modified 2026-06-17.