Threats tagged 'ghsa-w9f6-rqhw-7jh3'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.3%	CVE-2026-97895krayin laravel-crm · CWE-266 Medium5.3EPSS 0.3%2026-09-25GCVE DatabaseCVE-2026-97895 A vulnerability in krayin laravel-crm up to version 2.2.5 allows remote attackers to manipulate the role_id argument in the User Management component, leading to improper privilege management. This issue affects the file packages/Webkul/Admin/src/Http/Controllers/Settings/UserController.php. The vulnerability has a CVSS score of 6.3 and is addressed by upgrading to version 2.2.6. EPSS 0.3%Report on CVE-2026-97895 Vulnerability CWE-266 #ghsa-w9f6-rqhw-7jh3	GCVE Database	2026-09-25

Page 1 of 1