CVE-2026-97896 krayin CVE debrief

Who should care

Defenders responsible for krayin laravel-crm instances should assess exposure and apply the patch or upgrade to version 2.2.6. Defenders should prioritize verifying exposure of krayin laravel-crm instances to this cross-site scripting vulnerability and apply the patch or upgrade to version 2.2.6. Security teams and vulnerability management teams should review the vulnerability details and plan for remediation.

Why it matters

Defenders should prioritize verifying exposure of krayin laravel-crm instances to this cross-site scripting vulnerability and apply the patch or upgrade to version 2.2.6.

• Defenders must verify exposure of krayin laravel-crm instances to this cross-site scripting vulnerability
• Defenders should apply the patch or upgrade to version 2.2.6 to prevent exploitation
• Defenders should monitor for potential exploitation attempts

Technical summary

The vulnerability affects the function ConfigurationForm::rules of the file packages/Webkul/Admin/src/Http/Requests/ConfigurationForm.php of the component Upload Functionality in krayin laravel-crm up to 2.2.5, allowing for cross-site scripting attacks. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. Upgrading to version 2.2.6 is able to resolve this issue. The identifier of the patch is b9836530ec9f5ef0f51653bb0cbbc47ef7184f51. Defenders should prioritize verifying exposure of krayin laravel-crm instances to this cross-site scripting vulnerability.

Defensive priority

Defenders should prioritize verifying exposure of krayin laravel-crm instances to this cross-site scripting vulnerability and apply the patch or upgrade to version 2.2.6.

Recommended defensive actions

• Verify exposure of krayin laravel-crm instances to this cross-site scripting vulnerability
• Apply the patch or upgrade to version 2.2.6
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, affected versions, and patch information. Defenders should verify the exposure of krayin laravel-crm instances to this cross-site scripting vulnerability. The patch is identified as b9836530ec9f5ef0f51653bb0cbbc47ef7184f51. Upgrading to version 2.2.6 is able to resolve this issue. The attack is possible to be carried out remotely and might be used.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.