cybercrewinc/CVE-2026-36341

cybercrewinc/CVE-2026-36341

GitHubGitHub
GitHubgithub.com
Releases0
Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM (HTML Injection)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2026-36341↗
5.4 MEDIUM—

Cross-Site Scripting (XSS) vulnerability exists in Webkul Krayin CRM v2.1.5. The application fails to sanitize user-supplied input in the comment field during Activity creation on the /admin/activities/create endpoint