Medium severity6.1NVD Advisory· Published Oct 10, 2018· Updated Jun 17, 2026
CVE-2018-17784
CVE-2018-17784
Description
Multiple vulnerabilities in YUI and FlashCanvas embedded in SugarCRM Community Edition 6.5.26 could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack on a targeted system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: = 6.5.26
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/45594/nvdExploitThird Party AdvisoryVDB Entry
- twitter.com/purplemet/status/1043979681186369537nvdThird Party Advisory
- www.purplemet.com/blog/sugarcrm-multiple-xss-vulnerabilitiesnvd
News mentions
0No linked articles in our index yet.