Vulnerabilities in Krayin
14 resultsVexday analysis
Krayin apresenta footprint reduzido de apenas 1 vulnerabilidade catalogada, classificada como XSS (CWE-79), publicada recentemente nos últimos 90 dias. Não há evidência de exploração ativa em campo (KEV) ou severidade crítica, indicando um risco baixo e monitorável para este fornecedor.
CVE-2026-41452CRITICALKrayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setupEPSS 3.7%CVE-2026-90944HIGHKrayin CRM through 2.2.6 Unauthenticated Email Injection via inbound-parseEPSS 0.7%CVE-2026-61460HIGHKrayin CRM Insecure Direct Object Reference via ControllersEPSS 0.5%CVE-2026-41453HIGHKrayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead ParameterEPSS 0.5%CVE-2026-5370MEDIUMkrayin laravel-crm Activities Module/Notes inbox.spec.ts composeMail cross site scriptingEPSS 0.4%CVE-2026-97895MEDIUMkrayin laravel-crm User Management UserController.php privileges managementEPSS 0.3%CVE-2026-97896MEDIUMkrayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scriptingEPSS 0.2%CVE-2026-97897MEDIUMKrayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scriptingEPSS 0.2%CVE-2026-48540MEDIUMKrayin CRM 2.2.6 Stored Template Injection XSS via Lead TitleEPSS 0.2%CVE-2026-48541MEDIUMKrayin CRM 2.2.6 Stored Template Injection XSS via Contact Name FieldEPSS 0.1%CVE-2026-48542MEDIUMKrayin CRM 2.2.6 Stored Template Injection XSS via Product Name FieldEPSS 0.1%CVE-2026-48543MEDIUMKrayin CRM 2.2.6 Stored Template Injection XSS via Web Form DescriptionEPSS 0.1%CVE-2026-100882MEDIUMKrayin laravel-crm Admin Settings Endpoint index.blade.php cross site scriptingEPSS —CVE-2026-100883MEDIUMKrayin laravel-crm acl.php access controlEPSS —