CVE-2026-55184 | EspoCRM up to 9.3.8 Email Template moderateSanitizeHtml cross site scripting

October 15, 2026 Yanac

A vulnerability was found in EspoCRM up to 9.3.8. It has been rated as problematic. This vulnerability affects the function moderateSanitizeHtml of the component Email Template. The manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-55184. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More