CVE-2024-45932

Name of the Vulnerable Software and Affected Versions Krayin CRM version 1.3.0

Description The issue is related to a Cross Site Scripting (XSS) vulnerability. It occurs through the organization name field in the "/admin/contacts/organizations/edit/2" endpoint. This allows for potential malicious script injection.

Recommendations For Krayin CRM version 1.3.0, as a temporary workaround, consider restricting access to the "/admin/contacts/organizations/edit/2" endpoint until a patch is available. Additionally, avoid using the organization name field in this endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.