Webkul Krayin CRM 1.3.0
Approved changes feed: RSS · Atom
cpe:2.3:a:webkul:krayin_crm:1.3.0:*:*:*:*:*:*:*
part: a version: 1.3.0 update: *
| Vendor | Webkul (08ad6940-8efb-5f93-af42-cb470e3ac46e) |
|---|---|
| Product | Krayin Crm (a27acf1c-cab2-57be-b0be-3bbb8ef20db5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-46367 |
vulnerable | 2026-06-08 06:48:10.037250 |
Details available
A Stored Cross-Site Scripting (XSS) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to inject arbitrary JavaScript code by submitting a malicious payload within the username field. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system.
Published: 2024-09-27T00:00:00.000Z
Updated: 2024-09-27T19:12:38.360Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-46366 |
vulnerable | 2026-06-08 06:48:10.036710 |
Details available
A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead creation process. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system.
Published: 2024-09-27T00:00:00.000Z
Updated: 2024-09-27T19:15:08.549Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-45932 |
vulnerable | 2026-06-08 06:48:09.864578 |
Details available
Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organizations/edit/2.
Published: 2024-10-07T00:00:00.000Z
Updated: 2026-07-05T00:46:30.696Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.