Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-45932 · ADVISORY
• AslamMahi/CVE-Aslam-Mahi · WEB
• krayin/laravel-crm · PACKAGE
• krayincrm.com · WEB

Lỗ hổng khác của krayin/laravel-crm

• CVE-2026-36341TRUNG BÌNH 5.4Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the co…
• CVE-2026-36340CAO 8.1An issue in Krayin CRM v.2.1.5 and fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function
• CVE-2026-38532CAO 8.1A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenti…
• CVE-2026-38530CAO 8.1A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authentic…
• CVE-2026-38529CAO 8.8A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated att…