SuiteCRM Reflected HTML Injection Vulnerability in Login Page

A reflected HTML injection vulnerability has been identified in SuiteCRM versions through 7.15.0. This issue resides on the login page, where attackers can inject arbitrary HTML content. Such injections could facilitate phishing attacks or lead to page defacement. The vulnerability has been patched in SuiteCRM version 7.15.1.

Impact

Exploitation of this vulnerability allows for reflected HTML injection, which could be used to execute phishing attacks or deface the page.

Remediation

Users can upgrade to SuiteCRM version 7.15.1 to address this vulnerability.