{"id":"GHSA-74q2-6jp4-3rqq","aliases":["CVE-2024-45932"],"title":"Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"Krayin CRM v1.3.0 is vulnerable to Cross Site Scripting (XSS) via the organization name field in `/admin/contacts/organizations/edit/2`.","severity":"medium","score":4.8,"published":"2024-10-07T18:31:07.000Z","modified":"2024-10-07T19:42:09.927Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"krayin/laravel-crm","sources":[{"name":"OSV · GHSA-74q2-6jp4-3rqq","url":"https://osv.dev/vulnerability/GHSA-74q2-6jp4-3rqq"}],"ranges":[{"events":[{"introduced":"0"},{"last_affected":"1.3.0"}],"type":"ECOSYSTEM"}],"versions":["v1.0.0","v1.0.1","v1.1.0","v1.1.1","v1.1.2","v1.1.3","v1.2.0","v1.2.1","v1.2.2","v1.2.3","v1.2.4","v1.3.0"],"fixed":[]}],"sourceAffected":[],"references":["https://nvd.nist.gov/vuln/detail/CVE-2024-45932","https://github.com/AslamMahi/CVE-Aslam-Mahi/blob/main/Laravel%20CRM%20v1.3.0/CVE-2024-45932.md","https://github.com/krayin/laravel-crm","https://krayincrm.com"],"sources":[{"name":"OSV","id":"GHSA-74q2-6jp4-3rqq","modified":"2024-10-07T19:42:09.927685Z","url":"https://osv.dev/vulnerability/GHSA-74q2-6jp4-3rqq"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","score":4.8},{"source":"OSV","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N","score":4.6}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-29T01:35:32.302Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}