High severity8.8NVD Advisory· Published Sep 27, 2024· Updated Jun 17, 2026
CVE-2024-46366
CVE-2024-46366
Description
A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead creation process. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:webkul:krayin_crm:1.3.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:webkul:krayin_crm:1.3.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <1.3.0
Patches
Vulnerability mechanics
References
1- gist.github.com/Tommywarren/89cef7f876ee897a4ff40a8b71b6208envdThird Party Advisory
News mentions
0No linked articles in our index yet.