Webkul krayin crm 跨站脚本漏洞

Webkul krayin crm is a free and open source CRM solution for small and medium sized businesses from Webkul India. A cross-site scripting vulnerability exists in Webkul krayin crm versions prior to 1.2.2, which stems from an XSS vulnerability in datagrid...

Cross-site Scripting (XSS) - Stored in krayin/laravel-crm

Description Stored XSS at Name of Tag Detail When rendering grid for Tag, Name value is not filtered before rendering which can trigger XSS Proof of Concept // PoC.req POST /admin/settings/tags/edit/1 HTTP/1.1 Host: 127.0.0.1 User-Agent: Mozilla/5.0 Macintosh; Intel Mac OS X 10.15; rv:95.0...