CVE-2021-41924: Cross-site Scripting in krayin/laravel-crm
Published Jun 21, 2022
·Updated
Cross-site Scripting in krayin/laravel-crm
Other sources
Webkul krayin crm before 1.2.2 is vulnerable to Cross Site Scripting (XSS).
— MITRE
Affected Software
3 affected componentsFixes available
Webkul krayin<1.2.2
composer/krayin/laravel-crm<1.2.2
1.2.2
composer/krayin/laravel-crm<1.2.2
1.2.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
composer/krayin/laravel-crmto a version that resolves this vulnerability.Fixed in 1.2.2
Event History
Jun 21, 2022
CVE Published
via MITRE·02:18 PM
Data Sourced
via MITRE·02:18 PM
Description
Data Sourced
via NVD·03:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jun 22, 2022
Advisory Published
via GitHub·12:00 AM
Data Sourced
via GitHub·12:00 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via Packagist·12:00 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-41924.
2
What is the severity of CVE-2021-41924?
The severity of CVE-2021-41924 is medium with a CVSS score of 6.1.
3
What is affected by CVE-2021-41924?
Webkul krayin crm versions up to and excluding 1.2.2 are affected by CVE-2021-41924.
4
What is the CWE category for this vulnerability?
The CWE category for this vulnerability is CWE-79 (Cross-Site Scripting).
5
How can I fix CVE-2021-41924 in Webkul krayin crm?
To fix CVE-2021-41924, you should update Webkul krayin crm to version 1.2.2 or later.