Repository Issue Activity (beta)

#2044 Allow choosing which information will be displayed on the lead card (pipeline/kanban/list)

#2644 Menu::getItems() static cache is keyed on neither user nor area — admin sidebar silently loses items; cross-user leak under persistent runtimes

#2046 Track the source of leads by UTM in the form.

#2593 Add "Associated Group" Column to the Users Listing Grid

#2630 Import: date attributes (Excel serial, DD/MM/YYYY) silently saved as 0000-00-00

#2631 Import append of revised persons CSV duplicates records and drops select attribute (Gender/Ethnicity) values

#2646 Email validation always fails

#2647 How to delete leads?

#2616 Privilege Escalation via Unrestricted Role Assignment in User Management (Krayin CRM ≤ 2.2.5)

#2633 Google Contacts: clicking "Connect Google Account" throws InvalidArgumentException when OAuth credentials are not configured

#2048 Allow exporting a report based on dashboard data to PDF

#2632 Enhancement: accept plain values for emails/contact_numbers in CSV imports instead of JSON wrapping

#2629 Import "Process in queue" switch renders ON by default; imports fail on default sync queue

#2624 IDOR in Email Attachment Download (Krayin CRM ≤ 2.2.5)

#2628 # Bug Report: Email Attachment Download is Not Working

#2617 Stored Cross-Site Scripting (XSS) via Client-Controlled Upload Validation in Configuration (Krayin CRM ≤ 2.2.5)

#2623 Missing Function-Level Authorization (Broken Function-Level Access Control) (Krayin CRM ≤ 2.2.5)

#2622 Stored Cross-Site Scripting (Stored XSS) via Footer Configuration (TinyMCE Sanitization Bypass) (Krayin CRM ≤ 2.2.5)

#2550 Kanban infinite scroll never triggers and causes duplicate cards when fixed

#2594 Person with group/individual permission not visible in person table due to null user_id during lead creation

#2618 Stored XSS via SVG Sanitizer Bypass in TinyMCE Media Upload (Krayin CRM ≤ 2.2.5)

#2597 Custom attributes are not included in the sample CSV file, preventing users from importing records with custom attribute values.

#2551 No UI option to mark a pipeline stage as Won or Lost, causing silent JavaScript crash

#2584 SSRF via unvalidated webhook endpoint URL

#2601 Türkiye flag is so wrong.