CVE-2026-36341 | Krayin CRM 2.1.5 /admin/activities/create Comment cross site scripting

May 7, 2026 Yanac

A vulnerability described as problematic has been identified in Krayin CRM 2.1.5. This impacts an unknown function of the file /admin/activities/create. Such manipulation of the argument Comment leads to cross site scripting.

This vulnerability is listed as CVE-2026-36341. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More