Login Request a demo
KC
Product
Krayin Crm
by Webkul · last CVE Apr 14, 2026
8
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 1High 4Medium 3Low 0
Severity
All severities8Critical1High4Medium3Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Krayin Crm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-38529
8.8
1%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Settings/UserController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily reset user…
Affected: 2.2.0
CVE-2024-46366
8.8
1%
Sep 27
A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious…
Affected: 1.3.0
CVE-2026-38532
8.1
0%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Contact/Persons/PersonController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily read,…
Affected: 2.2.0
CVE-2026-38530
8.1
0%
Apr 14
A Broken Object-Level Authorization (BOLA) in the /Controllers/Lead/LeadController.php endpoint of Webkul Krayin CRM v2.2.x allows authenticated attackers to arbitrarily read,…
Affected: 2.2.0
Showing 4