Description
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows PHP object injection in the Import module by a Regular user.
Remediation
References
Related Vulnerabilities
Atlassian Jira CVE-2021-26076 Vulnerability (CVE-2021-26076)
WordPress Plugin Easy Google Map Cross-Site Scripting (1.1.4)
MySQL CVE-2019-2529 Vulnerability (CVE-2019-2529)
WordPress Plugin WordPress OpenID Connect Client Cross-Site Scripting (2.1.4)
WordPress Plugin Tickera-WordPress Event Ticketing Cross-Site Scripting (3.4.8.2)