CVE-2024-46367: XSS
A Stored Cross-Site Scripting (XSS) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to inject arbitrary JavaScript code by submitting a malicious payload within the username field. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-46367?
CVE-2024-46367 has a high severity rating as it allows remote attackers to execute arbitrary JavaScript via stored XSS.
How do I fix CVE-2024-46367?
To fix CVE-2024-46367, it is recommended to validate and sanitize user input in the username field and update to a patched version of Webkul Krayin CRM.
What are the potential impacts of CVE-2024-46367?
The potential impacts of CVE-2024-46367 include privilege escalation and unauthorized access to sensitive information.
Who is affected by CVE-2024-46367?
CVE-2024-46367 affects users of Webkul Krayin CRM version 1.3.0.
Is CVE-2024-46367 an easily exploitable vulnerability?
Yes, CVE-2024-46367 can be easily exploited by submitting a malicious payload in the username field.