CVE-2024-46366

8.8HIGH

A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead

게시됨: 9/27/2024업데이트됨: 7/9/2025
NVD에서 보기MITRE에서 보기

설명

A Client-side Template Injection (CSTI) vulnerability in Webkul Krayin CRM 1.3.0 allows remote attackers to execute arbitrary client-side template code by injecting a malicious payload during the lead creation process. This can lead to privilege escalation when the payload is executed, granting the attacker elevated permissions within the CRM system.

AI 분석AI 기반

영향받는 제품

webkulkrayin_crm
1.3.0

참조