CVE-2022-27474: Salesagility Suitecrm

High severity, CVSS 7.2. EPSS: 23.1% chance of exploitation in the next 30 days.

SuiteCRM v7.11.23 was discovered to allow remote code execution via a crafted payload injected into the FirstName text field.

Affected products

• Salesagility Suitecrm: version 7.11.23 only

Published 2022-04-15. Last modified 2026-06-17.