CVE-2020-14208: XSS
SuiteCRM 7.11.13 is affected by stored Cross-Site Scripting (XSS) in the Documents preview functionality. This vulnerability could allow remote authenticated attackers to inject arbitrary web script or HTML.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-14208?
CVE-2020-14208 is a vulnerability in SuiteCRM 7.11.13 that allows remote authenticated attackers to inject arbitrary web script or HTML through stored cross-site scripting (XSS) in the Documents preview functionality.
How severe is CVE-2020-14208?
CVE-2020-14208 has a severity rating of 5.4 (medium).
How does CVE-2020-14208 affect SuiteCRM?
CVE-2020-14208 affects SuiteCRM 7.11.13 and allows remote authenticated attackers to inject arbitrary web script or HTML.
Is there a fix available for CVE-2020-14208?
To fix CVE-2020-14208, it is recommended to update SuiteCRM to a version that is not affected by the vulnerability.
Where can I find more information about CVE-2020-14208?
More information about CVE-2020-14208 can be found at the following link: [https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-008](https://www.wizlynxgroup.com/security-research-advisories/vuln/WLX-2020-008)