CVE-2024-46367

Summary

CVE-2024-46367 is a newly discovered Stored Cross-Site Scripting (XSS) vulnerability affecting Webkul Krayin CRM version 1.3.0. This issue allows remote attackers to inject malicious JavaScript code into the system by submitting a malicious payload within the username field. Successful exploitation of this vulnerability can lead to privilege escalation, granting the attacker elevated permissions within the CRM system. Attackers can leverage this vulnerability to steal sensitive information, manipulate data, or even take control of the affected system. Users are strongly advised to update their CRM software to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.