Vulnerabilità
CVE-2026-97897
Scheda descrittiva ricevuta da OpenCTI e minimizzata per la consultazione nel portale Intel.
- Condivisione
- PUBLIC-OSINT
- Confidenza
- 100
- Fonte
- The CVE Program
- Aggiornata
- 26/09/2026 05:09
Descrizione
A security flaw has been discovered in Krayin laravel-crm up to 2.2.5. This issue affects some unknown processing of the file Sanitizer.php of the component TinyMCE Media Upload. The manipulation results in cross site scripting. The attack may be performed from remote. Upgrading to version 2.2.6 is capable of addressing this issue. The patch is identified as 734aa10ae6c2ffa4c96c8869a89aa66940e4d345. You should upgrade the affected component.
Alias e classificazioni
CWE-79CWE-94Code InjectionCross Site Scripting
Dettagli tecnici minimizzati
Nessun dato grezzo- cisa kev
- False
- cvss score
- 3.5
- cvss vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N/E:X/RL:O/RC:C
- cvss severity
- LOW
Provenienza
Riferimenti pubblici
- related
https://github.com/carlosalbertotuma/advisory/blob/main/advisory-03-stored-xss-tinymce-media-upload.md - issue-tracking
https://github.com/krayin/laravel-crm/pull/2639 - product
https://github.com/krayin/laravel-crm/ - patch
https://github.com/krayin/laravel-crm/releases/tag/v2.2.6 - Submit #915413 | Krayin Krayin CRM ≤ 2.2.5 Cross Site Scripting
https://vuldb.com/submit/915413 - patch
https://github.com/krayin/laravel-crm/commit/734aa10ae6c2ffa4c96c8869a89aa66940e4d345 - VDB-409909 | Krayin laravel-crm TinyMCE Media Upload Sanitizer.php cross site scripting
https://vuldb.com/vuln/409909 - CVE-2026-97897 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-97897 - VDB-409909 | CTI Indicators (IOB, IOC, TTP, IOA)
https://vuldb.com/vuln/409909/cti
Correlazione EudorIA
Catalogo Intel
La vulnerabilità è presente anche nel catalogo editoriale EudorIA.
Apri analisi EudorIALa presenza in OpenCTI descrive una correlazione di intelligence e non costituisce, da sola, prova di compromissione, attribuzione legale o indicazione operativa applicabile senza verifica del contesto.