| Package | Affected versions | Patched versions |
|---|---|---|
| sugarcrm | ≥ 7.9.0.0, < 7.9.5.0≥ 8.0.0, < 8.0.4≥ 9.0.0, < 9.0.2 | 7.9.5.08.0.49.0.2 |
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP code injection in the ModuleBuilder module by a Developer user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free