← All advisories

Medium severity5.4NVD Advisory· Published Apr 30, 2021· Updated Jun 17, 2026

CVE-2021-31792

CVE-2021-31792

Description

XSS in the client account page in SuiteCRM before 7.11.19 allows an attacker to inject JavaScript via the name field

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Salesagility/Suitecrm
cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*
Range: <7.11.19
SuiteCRM/SuiteCRMdescription
Suitecrm/Suitecrmllm-fuzzy
Range: <7.11.19
osv-coords
pkg:bitnami/suitecrm
Range: < 7.11.19

Patches

Vulnerability mechanics

References

2

chris-forbes.github.io/CVE-2021-31792nvdExploitThird Party Advisory
docs.suitecrm.com/admin/releases/7.11.x/nvdRelease NotesVendor Advisory

News mentions

0

No linked articles in our index yet.