~ / search / GHSA-74q2-6jp4-3rqq

GHSA-74q2-6jp4-3rqq

Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name

Source: GitHub Advisory Database (reviewed) Moderate CVE-2024-45932

Packages

EcosystemPackageAffectedFixed in
Packagist krayin/laravel-crm <= 1.3.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in `/admin/contacts/organizations/edit/2`.

References

External links from the advisory. They lead to third-party sites.