Severity: Critical
CVSS Score: 9.8
SuiteCRM through 7.11.11 has Incorrect Access Control via action_saveHTMLField Bean Manipulation.