CVE-2026-97897 in laravel-crm信息

预测

由 VulDB Data Team • 2026-09-25

已经在Krayin laravel-crm 直到 2.2.5中发现了一个漏洞。此漏洞会影响未知代码文件Sanitizer.php的组件TinyMCE Media Upload。在被操纵的情况下，会引发跨网站脚本。远程可以启动攻击，通过升级至 2.2.6 版本可以消除此问题。补丁名称为734aa10ae6c2ffa4c96c8869a89aa66940e4d345。建议将受影响的组件升级。

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

VulDB

管理

已接受

条目

VDB-409909

CPE

准备好

CWE

CWE-79 (已确认)

CVSS

3.5 (VulDB)

EPSS

0.00000

KEV

否

活动

低

部门

Police, Agriculture, ...

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2026-97897
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-97897
CVE Details	https://www.cvedetails.com/cve/CVE-2026-97897/

◂ 上一步一览下一步 ▸

Do you need the next level of professionalism?

Upgrade your account now!