SuiteCRM releases SuiteCRM 7.9.5 with major updates in security

SuiteCRM releases SuiteCRM 7.9.5 with major updates in security. The 7.9.x branch was an important hardening release in the SuiteCRM lineage, focused less on new features and more on tightening the attack surface for organisations running the platform in production.

Security Fixes in 7.9.5

The maintenance release addressed a number of issues that mattered most to admins running customer-facing instances:

• Adding escaping to EmailUIAjax.php
• Adding blocking module fields in AOW (Advanced Open Workflow)
• Adding ajaxUILoc XSS protection
• System email template access issue
• Relationship removal access issue
• Improved clean HTML for SugarFields
• Send correct password reset email
• Remove delete button in bulk action
• Prevents users from editing other employees' data
• Prevents users from inline editing without access
• Only an admin user can set admin access for users

Taken together, these patches closed off several privilege-escalation and cross-site-scripting paths that had surfaced in earlier 7.9 releases. The full release notes are published on the SuiteCRM wiki for teams that want to map each change against their own customisations before upgrading.

Why These Releases Still Matter

Security-only point releases rarely get the attention of a major version, but for regulated industries — banking, insurance, healthcare — they are exactly the updates that need to land quickly. A missed XSS patch in a CRM that stores customer PII is the kind of finding that turns up in the next compliance audit. Organisations running older 7.x builds should treat the 7.9.x line as a baseline floor.

Redian Software has supported SuiteCRM upgrades for clients across financial services and the public sector since becoming an active contributor to the platform. Our SuiteCRM practice(/expertise/crm/suitecrm) handles version upgrades, custom module regression testing, and security reviews as part of a single engagement, and our BFSI solutions(/solutions/bfsi) team has packaged the patterns most relevant to banks and insurers. If you are still running a 7.8 or earlier build, the upgrade path through 7.9.5 is a sensible first step — and one we can help plan and execute(/services/crm-erp-implementation). Teams that prefer to talk through their upgrade options first can reach out(/contact).