High · 7.1 CVE-2024-45932 EUVD-2024-2971GHSA-74q2-6jp4-3rqq

Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name

Published Oct 7, 2024 · Updated Jul 5, 2026 · Assigned by mitre

Description

Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organizations/edit/2.

Ecosystem	Package	Affected	Fixed	Record
Packagist	krayin/laravel-crm	<= 1.3.0	—	GHSA-74q2-6jp4-3rqq