CVE-2023-5351 HIGH

CVE-2023-5351: Cross-site Scripting (XSS) - Stored in salesagility/suitecrm

Vendor Salesagility
Product salesagility/suitecrm
Weakness CWE-79 · XSS
Published October 3, 2023
Last update September 19, 2024
View on NVD All CVEs

CVSS base score

8.9/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:L

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm prior to 7.14.1.

Key dates

02Disclosure timeline

October 3, 2023 CVE published
September 19, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-32956 WordPress RomethemeKit For Elementor plugin <= 1.4.1 - Cross Site Scripting (XSS) vulnerability CVE-2023-26001 WordPress Next Event Calendar <= 1.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-12711 Share to Google Classroom <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via share_to_google Shortcode CVE-2021-24614 Book appointment Online < 1.39 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2020-37174 WOOF / Products Filter Professional for WooCommerce 1.2.3 Persistent XSS