CVE-2026-61653 | SuiteCRM prior 7.15.2/8.10.2 Campaigns PopupCampaignRoi.php securexss id sql injection

A vulnerability classified as critical was found in SuiteCRM. Affected is the function securexss of the file modules/Campaigns/PopupCampaignRoi.php of the component Campaigns. Such manipulation of the argument ID leads to sql injection.

This vulnerability is documented as CVE-2026-61653. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More