CVE-2026-48540 | Krayin laravel-crm up to 2.2.6 Template Compiler lead title special elements in template engine

A vulnerability classified as problematic has been found in Krayin laravel-crm up to 2.2.6. The impacted element is an unknown function of the component Template Compiler. Performing a manipulation of the argument lead title results in improper neutralization of special elements used in a template engine.

This vulnerability is cataloged as CVE-2026-48540. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More