← All advisories

Medium severity4.8NVD Advisory· Published Oct 7, 2024· Updated Jul 5, 2026

CVE-2024-45932

CVE-2024-45932

Description

Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in /admin/contacts/organizations/edit/2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
krayin/laravel-crmPackagist	<= 1.3.0	—

Affected products

3

Webkul/Krayin CRM
cpe:2.3:a:webkul:krayin_crm:1.3.0:*:*:*:*:*:*:*
Krayin/Krayin CRMdescription
ghsa-coords
pkg:composer/krayin/laravel-crm
Range: <= 1.3.0

Patches

Vulnerability mechanics

References

4

github.com/AslamMahi/CVE-Aslam-Mahi/blob/main/Laravel%20CRM%20v1.3.0/CVE-2024-45932.mdnvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-74q2-6jp4-3rqqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-45932ghsaADVISORY
krayincrm.comghsaWEB

News mentions

0

No linked articles in our index yet.