small_crm vulnerabilities
CVEs whose affected-version data names the small_crm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-90575Low· 3.7PoCA weakness has been identified in PHPGurukul Small CRM 4.0
A weakness has been identified in PHPGurukul Small CRM 4.0. This impacts the function unserialize of the file /crm/login.php of the component Login Success Handler. This manipulation of the argument geopluginURL causes deserialization. I…
CVE-2025-11053High· 7.3A weakness has been identified in PHPGurukul Small CRM 4.0
A weakness has been identified in PHPGurukul Small CRM 4.0. This affects an unknown function of the file /forgot-password.php. Executing manipulation of the argument email can lead to sql injection. The attack can be launched remotely. T…
CVE-2025-10079High· 7.3A flaw has been found in PHPGurukul Small CRM 4.0
A flaw has been found in PHPGurukul Small CRM 4.0. Affected by this vulnerability is an unknown functionality of the file /get-quote.php. Executing manipulation of the argument Contact can lead to sql injection. The attack can be execute…