PT-2025-32236 · Suitecrm · Suitecrm

Jack7Anderson7 · Published 2025-08-07 · Updated 2025-08-12 · CVE-2025-54783

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SuiteCRM versions 7.14.6 and below

Description SuiteCRM is an open-source Customer Relationship Management (CRM) software application susceptible to a Reflected Cross-Site Scripting (XSS) issue. An attacker can execute JavaScript code by manipulating the HTTP Referer header to include a malicious domain containing JavaScript code. The server attempts to block the domain but allows the JavaScript code to execute.

Recommendations Upgrade to SuiteCRM version 7.14.7 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-54783

GHSA-VQRJ-GP9M-8C6R

Affected Products

Suitecrm

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54783.json · Exploit
• https://github.com/SuiteCRM/SuiteCRM/security/advisories/GHSA-vqrj-gp9m-8c6r · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54783 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54783 · Security Note
• https://t.me/cveNotify/131956 · Telegram Post
• https://t.me/CVEtracker/29408 · Telegram Post
• https://docs.suitecrm.com/admin/releases/7.14.x/#_7_14_7 · Note
• https://twitter.com/VulmonFeeds/status/1953326795064836373 · Twitter Post