Krayin vulnerabilities

Products

• Laravel-crm 21

Newest

• krayin laravel-crm Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding CVE-2026-112288 2.1 LowOctober 19, 2026
• krayin laravel-crm Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Module CVE-2026-112287 7.1 HighOctober 19, 2026
• krayin laravel-crm Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpoints CVE-2026-112286 7.1 HighOctober 19, 2026
• krayin laravel-crm VentureDrake Laravel CRM before 2.4.0 Privilege Escalation via Unscoped Role Assignment CVE-2026-110630 7.0 HighOctober 14, 2026
• krayin laravel-crm VentureDrake Laravel CRM before 2.4.0 Missing Authorization via Livewire Actions CVE-2026-110629 7.1 HighOctober 14, 2026
• krayin laravel-crm Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization CVE-2026-100885 Public exploit 6.9 MediumSeptember 27, 2026
• krayin laravel-crm Krayin laravel-crm attachment-download Endpoint acl.php resource injection CVE-2026-100884 5.3 MediumSeptember 27, 2026
• krayin laravel-crm Krayin laravel-crm acl.php access control CVE-2026-100883 5.3 MediumSeptember 27, 2026
• krayin laravel-crm Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scripting CVE-2026-100882 4.8 MediumSeptember 27, 2026
• krayin laravel-crm Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting CVE-2026-97897 5.1 MediumSeptember 25, 2026
• krayin laravel-crm krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scripting CVE-2026-97896 5.1 MediumSeptember 25, 2026
• krayin laravel-crm krayin laravel-crm User Management UserController.php privileges management CVE-2026-97895 5.3 MediumSeptember 25, 2026
• krayin laravel-crm Krayin CRM 2.2.6 Stored Template Injection XSS via Web Form Description CVE-2026-48543 5.1 MediumSeptember 24, 2026
• krayin laravel-crm Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Field CVE-2026-48542 5.1 MediumSeptember 24, 2026
• krayin laravel-crm Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Field CVE-2026-48541 5.1 MediumSeptember 24, 2026
• krayin laravel-crm Krayin CRM 2.2.6 Stored Template Injection XSS via Lead Title CVE-2026-48540 5.1 MediumSeptember 24, 2026
• krayin laravel-crm Krayin CRM through 2.2.6 Unauthenticated Email Injection via inbound-parse CVE-2026-90944 8.8 HighSeptember 14, 2026
• krayin laravel-crm Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameter CVE-2026-41453 8.7 HighAugust 3, 2026
• krayin laravel-crm Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setup CVE-2026-41452 Public exploit 9.3 CriticalAugust 3, 2026
• krayin laravel-crm Krayin CRM Insecure Direct Object Reference via Controllers CVE-2026-61460 8.7 HighJuly 10, 2026
• krayin laravel-crm krayin laravel-crm Activities Module/Notes inbox.spec.ts composeMail cross site scripting CVE-2026-5370 5.1 MediumApril 2, 2026