NetSight
medium4.8

CVE-2024-45932

Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name

Impact

Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in `/admin/contacts/organizations/edit/2`.

Affected packages

EcosystemPackageAffectedFixed in
composerkrayin/laravel-crm<= 1.3.0none recorded

Affected products

VendorProductAffected versions
WebkulKrayin Crm
Version 1.3.0

Weakness classification

References