Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organizations/edit/2.
References
| Link | Resource |
|---|---|
| http://TobeReleased.com | Broken Link |
| https://github.com/AslamMahi/CVE-Aslam-Mahi/blob/main/Laravel%20CRM%20v1.3.0/CVE-2024-45932.md | Exploit Third Party Advisory |
Configurations
History
11 Oct 2024, 13:21
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:webkul:krayin_crm:1.3.0:*:*:*:*:*:*:* | |
| First Time |
Webkul
Webkul krayin Crm |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 4.8 |
| Summary |
|
|
| References | () http://TobeReleased.com - Broken Link | |
| References | () https://github.com/AslamMahi/CVE-Aslam-Mahi/blob/main/Laravel%20CRM%20v1.3.0/CVE-2024-45932.md - Exploit, Third Party Advisory |
07 Oct 2024, 19:37
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| CWE | CWE-79 |
07 Oct 2024, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-07 16:15
Updated : 2024-10-11 13:21
NVD link : CVE-2024-45932
Mitre link : CVE-2024-45932
CVE.ORG link : CVE-2024-45932
JSON object : View
Products Affected
webkul
- krayin_crm
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')