CVE-2018-15606: XSS
Published Sep 26, 2018
·Updated
An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message.
Affected Software
2 affected components
SalesAgility SuiteCRM>=7.0.0<7.8.21
SalesAgility SuiteCRM>=7.10.0<7.10.8
Event History
Sep 26, 2018
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-15606?
CVE-2018-15606 has a moderate severity level due to its cross-site scripting (XSS) vulnerability.
2
How do I fix CVE-2018-15606?
To fix CVE-2018-15606, you need to upgrade SuiteCRM to version 7.8.21 or 7.10.8 or a later version.
3
Which versions of SuiteCRM are affected by CVE-2018-15606?
CVE-2018-15606 affects SuiteCRM versions prior to 7.8.21 and 7.10.8.
4
What are the implications of CVE-2018-15606?
CVE-2018-15606 could potentially allow attackers to perform phishing attacks through crafted error messages.
5
Is CVE-2018-15606 a common vulnerability in SuiteCRM?
CVE-2018-15606 is one of the known vulnerabilities in older SuiteCRM versions, highlighting the importance of timely updates.