{"id":"CVE-2018-15606","details":"An XSS issue was discovered in SalesAgility SuiteCRM 7.x before 7.8.21 and 7.10.x before 7.10.8, related to phishing an error message.","modified":"2026-07-08T06:03:24.530395852Z","published":"2018-09-26T17:29:00.337Z","database_specific":{"unresolved_ranges":[{"vendor_product":"salesagility:suitecrm","cpes":["cpe:2.3:a:salesagility:suitecrm:*:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"7.0.0"},{"fixed":"7.8.21"},{"introduced":"7.0.0"},{"fixed":"7.8.21"},{"introduced":"7.10.0"},{"fixed":"7.10.8"},{"introduced":"7.10.0"},{"fixed":"7.10.8"}],"source":"CPE_RANGE"}]},"references":[{"type":"ADVISORY","url":"https://docs.suitecrm.com/admin/releases/#anchor-7.10.8"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/SuiteCRM/SuiteCRM","events":[{"introduced":"0"},{"fixed":"cb7fb05306f412ffc197f92bbf858fb63a3ffff7"},{"introduced":"c6bece6ab3acd29365f5fc663ba8f3cc359a986b"},{"fixed":"153b2bae76097cdba9fc9c025bcd829a702b8687"}],"database_specific":{"source":"DESCRIPTION","extracted_events":[{"introduced":"7.x"},{"fixed":"7.8.21"},{"introduced":"7.10.x"},{"fixed":"7.10.8"}]}}],"versions":["v7.8.20","v7.10.5","v7.10.7","v7.10.4","v7.10.6","v7.8.19","v7.10.1","v7.8.18","v7.10.3","v7.8.17","v7.10.2","v7.8.16","v7.8.15","v7.10.0","v7.8.14","v7.8.12","v7.8.11","v7.8.9","v7.8.5","v7.8.4","v7.8.3","v7.8.1","v7.8.0","v7.8.0-rc","v7.8.0-beta.2","v7.8.0-beta","v7.7.4","v7.7.3","v7.7.2","v7.7","v7.7-rc2","v7.7-rc","v7.7-beta2","v7.7-beta1","v7.6.1","v7.6","v7.5.1","v7.5-beta.2","v7.4.3","v7.5-beta","v7.4.1","v7.4.2","v7.3.2","v7.3.1","v7.3","v7.3-beta","v7.2","v7.2.1","v7.1.3","v7.2beta2","v7.1.4","v7.2beta","v7.1.2","v7.1.1","v7.1","v7.0.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-15606.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}