Krayin Laravel-Crm vulnerabilities

CVE-2026-97897 [LOW] CWE-79 CVE-2026-97897: A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unkno A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the component TinyMCE Media Upload. The manipulation results in cross site scripting. The attack may be performed from remote. Upgrading to version 2.2.6 is capable of addressing this issue. The patch is identifi

CVE-2026-5370 [LOW] CWE-79 CVE-2026-5370: A vulnerability was identified in krayin laravel-crm up to 2.2. Impacted is the function composeMail A vulnerability was identified in krayin laravel-crm up to 2.2. Impacted is the function composeMail of the file packages/Webkul/Admin/tests/e2e-pw/tests/mail/inbox.spec.ts of the component Activities Module/Notes Module. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and mi

CVE-2024-45932 [MEDIUM] CWE-79 Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in `/admin/contacts/organizations/edit/2`.

CVE-2026-100882 [LOW] CWE-79 CVE-2026-100882: A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of t A vulnerability was detected in Krayin laravel-crm up to 2.2.5. Impacted is an unknown function of the file packages/Webkul/Admin/src/Resources/views/components/layouts/index.blade.php of the component Admin Settings Endpoint. Performing a manipulation of the argument general.settings.footer.label results in cross site scripting. The attack can be ini