Security Advisory
CVE-2024-46367
9.6
CRITICAL
Vulnerability Description
A Stored Cross-Site Scripting (XSS) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to inject arbitrary JavaScript code by submitting a malicious payload within the username field. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system.
Published Date
September 27, 2024
Official Source
NIST NVD Advisory