← All advisories

Medium severity6.1NVD Advisory· Published Jan 16, 2018· Updated Jun 17, 2026

CVE-2018-5715

CVE-2018-5715

Description

phprint.php in SugarCRM 3.5.1 has XSS via a parameter name in the query string (aka a $key variable).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Sugarcrm/Sugarcrminferred2 versions
= 3.5.1+ 1 more
- (no CPE)range: = 3.5.1
- (no CPE)range: =3.5.1

Patches

Vulnerability mechanics

References

2

m4k4br0.github.io/sugarcrm-xss/nvdExploitThird Party Advisory
www.exploit-db.com/exploits/43683/nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.