koalixcrm vulnerabilities

CVEs whose affected-version data names the koalixcrm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112289Medium· 5.4

today

Koalixcrm through 1.14.0 Stored XSS via Task Title in Django Admin

Koalixcrm through 1.14.0 contains a stored cross-site scripting vulnerability that allows staff users to inject script by storing malicious task titles rendered unescaped by Task.link_to_task(). Attackers can embed HTML or script that ex…

▾ SunlitKoalixSwitzerland · koalixcrmvia CVEORG