CVE-2023-2925

Name of the Vulnerable Software and Affected Versions Webkul krayin crm version 1.2.4

Description A problematic issue was found in the Edit Person Page component, specifically affecting the /admin/contacts/organizations/edit/2 file. The manipulation of the Organization argument leads to cross-site scripting. This issue can be initiated remotely. The exploit has been disclosed publicly.

Recommendations For version 1.2.4, consider disabling the Edit Person Page component or restricting access to the /admin/contacts/organizations/edit/2 endpoint until a fix is available. Avoid using the Organization argument in the affected endpoint to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.