Security Advisory
CVE-2020-8803
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospect_list.