Vulnerabilities in EspoCRM

43 results
CVE-2026-46708MEDIUMEspoCRM: Target list Opt-Out actions allows opting out record without access Target List and access to recordEPSS 0.2%CVE-2026-33657MEDIUMEspoCRM: Stored HTML injection in email notifications about stream notes via unescaped post fieldEPSS 0.2%CVE-2025-59428MEDIUMEspoCRM allows arbitrary user creation via stored SVG injection and CSRFEPSS 0.1%