CVE-2024-46366
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Sep 27, 2024
Updated: Sep 30, 2024
CWE ID 1336
Summary
CVE-2024-46366 is a Client-side Template Injection (CSTI) vulnerability affecting Webkul Krayin CRM version 1.3.0. This issue permits remote attackers to inject malicious code during the lead creation process, enabling them to execute arbitrary client-side template code. Successful exploitation can result in privilege escalation, granting the attacker elevated permissions within the CRM system.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Webkul