CVE-2026-53575 | EspoCRM up to 9.3.8 applicationName cross site scripting

October 15, 2026 Yanac

A vulnerability categorized as problematic has been discovered in EspoCRM up to 9.3.8. This issue affects some unknown processing. The manipulation of the argument applicationName results in cross site scripting.

This vulnerability is identified as CVE-2026-53575. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More