Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:webkul:krayin_crm:2.1.0:*:*:*:*:*:*:*

1 brief RSS
low advisory

Privilege Escalation in Webkul Krayin CRM via SVG XSS

CVE-2025-3568 allows an authenticated low-privileged user to perform an administrative account takeover in Krayin CRM 2.0.0 and 2.1.0 by leveraging SVG-based XSS to bypass password verification controls.

Krayin CRM web-application privilege-escalation xss csrf
1r 2t 1c