CVE-2026-8901 | plugcrux Integration for Freshsales Plugin up to 1.0.15 on WordPress CRM API cross site scripting

June 6, 2026 Yanac

A vulnerability labeled as problematic has been found in plugcrux Integration for Freshsales Plugin up to 1.0.15 on WordPress. Affected by this vulnerability is an unknown functionality of the component CRM API. Such manipulation leads to cross site scripting.

This vulnerability is referenced as CVE-2026-8901. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More