{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.3.0"}],"component":"krayin/laravel-crm","cve_ids":["CVE-2024-45932"],"ecosystem":"Packagist","epss":0.0042,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-74q2-6jp4-3rqq","id":"tcs_01M5KEXPG2AK58EGRAAGYS1A8Q","modified_at":"2024-10-07T19:42:09.927685Z","published_at":"2024-10-07T18:31:07Z","references":["https://osv.dev/vulnerability/GHSA-74q2-6jp4-3rqq","https://nvd.nist.gov/vuln/detail/CVE-2024-45932","https://github.com/AslamMahi/CVE-Aslam-Mahi/blob/main/Laravel%20CRM%20v1.3.0/CVE-2024-45932.md","https://github.com/krayin/laravel-crm","https://krayincrm.com"],"severity":{"label":"medium","score":4.8},"sources":[{"source":"osv","source_id":"GHSA-74q2-6jp4-3rqq","url":"https://osv.dev/vulnerability/GHSA-74q2-6jp4-3rqq"}],"summary":"Krayin CRM vulnerable to Cross Site Scripting (XSS) via the organization name"}