~ / search / GHSA-32px-ccfx-cxq3

GHSA-32px-ccfx-cxq3

Krayin CRM allows a remote attacker to execute arbitrary code via compose email function

Source: GitHub Advisory Database (reviewed) High CVE-2026-36340

Packages

EcosystemPackageAffectedFixed in
Packagist krayin/laravel-crm >= 2.1.5, < 2.1.6 2.1.6

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in Krayin CRM v.2.1.5, which was fixed in v.2.1.6 allows a remote attacker to execute arbitrary code via the compose email function.

References

External links from the advisory. They lead to third-party sites.