CVE-2026-41453

Krayin CRM before 2.2.4 is affected by a blind SQL injection in the leads DataGrid. The vulnerability arises from the rotten_lead[in] parameter being concatenated into a HAVING clause inside LeadDataGrid.php without parameterized binding, enabling authenticated users with access to leads to injec...