Login Request a demo
KC
Product
krayin crm
by Webkul · last CVE Apr 14, 2026
8
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 4Medium 3Low 0
Severity
All severities8Critical1High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add krayin crm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-46367
9.6
1%
Sep 27
A Stored Cross-Site Scripting (XSS) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to inject arbitrary JavaScript code by submitting a malicious payload within…
Affected: 1.3.0
CVE-2026-38529
8.8
1%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily reset user…
Affected: 2.2.0
CVE-2024-46366
8.8
1%
Sep 27
A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious…
Affected: 1.3.0
CVE-2026-38532
8.1
0%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily read,…
Affected: 2.2.0
CVE-2026-38530
8.1
0%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily read,…
Affected: 2.2.0
CVE-2025-3568
5.4
0%
Apr 14
Webkul Krayin CRM SVG File edit cross site scripting
Affected: 2.0; 2.1
CVE-2023-2925
5.4
1%
May 27
Webkul krayin crm Edit Person Page 2 cross site scripting
Affected: 1.2.4
CVE-2024-45932
4.8
0%
Oct 7
Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organizations/edit/2
Affected: 1.3.0
Showing 8