agentprime: krayin-laravel-crmEvery new CVE for krayin-laravel-crm.https://agentprime.io/CVE-2026-112288: Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebindinghttps://agentprime.io/advisories/CVE-2026-112288/https://agentprime.io/advisories/CVE-2026-112288/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 13:55:31 GMTCVECVE-2026-112287: Krayin CRM before 2.2.7 Broken Object Level Authorization in Mail Modulehttps://agentprime.io/advisories/CVE-2026-112287/https://agentprime.io/advisories/CVE-2026-112287/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 13:55:30 GMTCVECVE-2026-112286: Krayin CRM before 2.2.7 IDOR via Quote Search and Lead-Products Endpointshttps://agentprime.io/advisories/CVE-2026-112286/https://agentprime.io/advisories/CVE-2026-112286/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 Oct 2026 13:55:29 GMTCVECVE-2026-100885: Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorizationhttps://agentprime.io/advisories/CVE-2026-100885/https://agentprime.io/advisories/CVE-2026-100885/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 22:45:19 GMTCVECVE-2026-100884: Krayin laravel-crm attachment-download Endpoint acl.php resource injectionhttps://agentprime.io/advisories/CVE-2026-100884/https://agentprime.io/advisories/CVE-2026-100884/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 22:30:14 GMTCVECVE-2026-100883: Krayin laravel-crm acl.php access controlhttps://agentprime.io/advisories/CVE-2026-100883/https://agentprime.io/advisories/CVE-2026-100883/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 22:15:08 GMTCVECVE-2026-100882: Krayin laravel-crm Admin Settings Endpoint index.blade.php cross site scriptinghttps://agentprime.io/advisories/CVE-2026-100882/https://agentprime.io/advisories/CVE-2026-100882/CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 27 Sep 2026 22:00:13 GMTCVECVE-2026-97897: Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scriptinghttps://agentprime.io/advisories/CVE-2026-97897/https://agentprime.io/advisories/CVE-2026-97897/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:45:09 GMTCVECVE-2026-97896: krayin laravel-crm Upload Functionality ConfigurationForm.php rules cross site scriptinghttps://agentprime.io/advisories/CVE-2026-97896/https://agentprime.io/advisories/CVE-2026-97896/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:30:19 GMTCVECVE-2026-97895: krayin laravel-crm User Management UserController.php privileges managementhttps://agentprime.io/advisories/CVE-2026-97895/https://agentprime.io/advisories/CVE-2026-97895/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 18:15:17 GMTCVECVE-2026-48543: Krayin CRM 2.2.6 Stored Template Injection XSS via Web Form Descriptionhttps://agentprime.io/advisories/CVE-2026-48543/https://agentprime.io/advisories/CVE-2026-48543/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 19:33:02 GMTCVECVE-2026-48542: Krayin CRM 2.2.6 Stored Template Injection XSS via Product Name Fieldhttps://agentprime.io/advisories/CVE-2026-48542/https://agentprime.io/advisories/CVE-2026-48542/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 19:31:52 GMTCVECVE-2026-48541: Krayin CRM 2.2.6 Stored Template Injection XSS via Contact Name Fieldhttps://agentprime.io/advisories/CVE-2026-48541/https://agentprime.io/advisories/CVE-2026-48541/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 19:31:13 GMTCVECVE-2026-48540: Krayin CRM 2.2.6 Stored Template Injection XSS via Lead Titlehttps://agentprime.io/advisories/CVE-2026-48540/https://agentprime.io/advisories/CVE-2026-48540/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 19:28:00 GMTCVECVE-2026-90944: Krayin CRM through 2.2.6 Unauthenticated Email Injection via inbound-parsehttps://agentprime.io/advisories/CVE-2026-90944/https://agentprime.io/advisories/CVE-2026-90944/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 14 Sep 2026 17:52:05 GMTCVECVE-2026-41453: Krayin CRM < 2.2.4 Blind SQL Injection via LeadDataGrid.php rotten_lead Parameterhttps://agentprime.io/advisories/CVE-2026-41453/https://agentprime.io/advisories/CVE-2026-41453/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 15:47:11 GMTCVECVE-2026-41452: Krayin CRM 2.2.4 Missing Authentication via install/api/admin-config-setuphttps://agentprime.io/advisories/CVE-2026-41452/https://agentprime.io/advisories/CVE-2026-41452/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 03 Aug 2026 15:43:05 GMTCVEcriticalCVE-2026-61460: Krayin CRM Insecure Direct Object Reference via Controllershttps://agentprime.io/advisories/CVE-2026-61460/https://agentprime.io/advisories/CVE-2026-61460/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 18:24:49 GMTCVE