CVE-2026-48543 | krayin laravel-crm up to 2.2.6 Web Form Description special elements in template engine

September 24, 2026 Yanac

A vulnerability marked as problematic has been reported in krayin laravel-crm up to 2.2.6. Impacted is an unknown function of the component Web Form. This manipulation of the argument Description causes improper neutralization of special elements used in a template engine.

This vulnerability is tracked as CVE-2026-48543. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More