296,336
Total vulnerabilities in the database
In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation.
| Software | From | Fixed in |
|---|---|---|
| sugarcrm / sugarcrm | 11.0.0 | 11.0.5 |
| sugarcrm / sugarcrm | 12.0.0 | 12.0.2 |