Skip to content
Threat Feed
Subscribe

Product

Krayin CRM (2.0.0, 2.1.0)

1 brief RSS
low advisory

Privilege Escalation in Webkul Krayin CRM via SVG XSS

CVE-2025-3568 allows an authenticated low-privileged user to perform an administrative account takeover in Krayin CRM 2.0.0 and 2.1.0 by leveraging SVG-based XSS to bypass password verification controls.

Krayin CRM web-application privilege-escalation xss csrf
1r 2t 1c