| Package | Affected versions | Patched versions |
|---|---|---|
| vtiger crm | ≤ 5.0.2 |
WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass field level security permissions and merge arbitrary fields in an Email template, as demonstrated by the fields in the Contact module.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free