CVE-2026-100358

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application.

Suitecrm

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, the Studio Dropdown Editor passes $dropdown_name through html_entity_decode() and writes the result verbatim into a PHP language file under custom/ that is included on later page loads. An administrator can inject persistent PHP that executes as the web-server account, survives cache clears, and compromises application and host…

5. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-100358
• GitHub
  https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-4773-c8fh-3rww