A vulnerability labeled as problematic has been found in plugcrux Integration for Freshsales Plugin up to 1.0.15 on WordPress. Affected by this vulnerability is an unknown functionality of the component CRM API . Such manipulation leads to cross site scripting. This vulnerability is referenced as CVE-2026-8901 . It is possible to launch the attack remotely. No exploit is available. The affected component should be upgraded.