Login Request a demo
KC
Product
Krayin Crm
by Webkul · last CVE Apr 14, 2026
8
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 4Medium 3Low 0
Severity
All severities8Critical1High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Krayin Crm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-46367
9.6
1%
Sep 27
A Stored Cross-Site Scripting (XSS) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to inject arbitrary JavaScript code by submitting a malicious payload within…
Affected: 1.3.0
CVE-2026-38529
8.8
1%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily reset user…
Affected: 2.2.0
CVE-2024-46366
8.8
1%
Sep 27
A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious…
Affected: 1.3.0
CVE-2026-38532
8.1
0%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily read,…
Affected: 2.2.0
CVE-2026-38530
8.1
0%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily read,…
Affected: 2.2.0
CVE-2025-3568
5.4
0%
Apr 14
A vulnerability has been found in Webkul Krayin CRM up to 2.1.0 and classified as problematic
Affected: 2.0.0; 2.1.0
CVE-2023-2925
5.4
1%
May 27
A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4
Affected: 1.2.4
CVE-2024-45932
4.8
0%
Oct 7
Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organizations/edit/2
Affected: 1.3.0
Showing 8