[MEDIUM] Webkul Krayin CRM is Vulnerable to Cross-Site Scripting in the /admin/activities/create endpoint

PKSA-bfyk-wk4r-cjz9 CVE-2026-36341 GHSA-j822-46r5-h4qx

Affected package: krayin/laravel-crm

Affected version: =2.1.5

Reported by:
GitHub