krayin/laravel-crm vulnerabilities (Packagist)
9 vulnerabilities.
krayin/laravel-crmPackagistWebkul Krayin CRM is Vulnerable to Cross-Site Scripting in the /admin/activities/create endpoint5.4 Mediumkrayin/laravel-crmPackagistKrayin CRM allows a remote attacker to execute arbitrary code via compose email function8.1 Highkrayin/laravel-crmPackagistWebkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php8.1 Highkrayin/laravel-crmPackagistWebkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php8.1 Highkrayin/laravel-crmPackagistWebkul Krayin CRM has Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php8.8 Highkrayin/laravel-crmPackagistWebkul Krayin CRM has Server-Side Request Forgery (SSRF)8.5 Highkrayin/laravel-crmPackagistkrayin laravel-crm Activities Module/Notes inbox.spec.ts composeMail cross site scripting5.1 Mediumkrayin/laravel-crmPackagistKrayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name4.8 Mediumkrayin/laravel-crmPackagistCross-site Scripting in krayin/laravel-crm6.1 Medium