Perfex Crm
Approved changes feed: RSS · Atom
cpe:2.3:a:perfexcrm:perfex_crm:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Perfexcrm (b3ffd752-5890-5a7f-aab9-84da5bad30dc) |
|---|---|
| Product | Perfex Crm (3ba58a71-cd5a-5724-a61a-538aa622147d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2974 |
vulnerable | 2026-06-08 07:16:58.766165 |
CodeCanyon Perfex CRM Contracts contract cross site scripting
LOW (3.5)
A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-31T03:31:05.880Z
Updated: 2025-03-31T16:04:34.258Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10346 |
vulnerable | 2026-06-08 07:02:26.730071 |
HTML injection in Perfex CRM
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a
stored HTML injection due to lack of proper validation of user input by
sending a POST request in the parameters 'subject' at the endpoint 'knoewledge_base/article'.
Published: 2025-09-29T08:43:21.901Z
Updated: 2025-09-29T11:18:55.983Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10345 |
vulnerable | 2026-06-08 07:02:26.729647 |
HTML injection in Perfex CRM
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a
stored HTML injection due to lack of proper validation of user input by
sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'.
Published: 2025-09-29T08:42:21.781Z
Updated: 2025-09-29T11:38:22.710Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10344 |
vulnerable | 2026-06-08 07:02:26.729124 |
HTML injection in Perfex CRM
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a
stored HTML injection due to lack of proper validation of user input by
sending a POST request in the parameters 'name' and 'clientid' at the endpoint '/projects/project/x'.
Published: 2025-09-29T08:41:38.556Z
Updated: 2025-09-29T11:39:00.614Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10343 |
vulnerable | 2026-06-08 07:02:26.728817 |
HTML injection in Perfex CRM
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a
stored HTML injection due to lack of proper validation of user input by
sending a POST request in the parameter 'expense_name' at the endpoint '/expenses/expense'.
Published: 2025-09-29T08:39:02.142Z
Updated: 2025-09-29T11:39:39.340Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10342 |
vulnerable | 2026-06-08 07:02:26.728482 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-10341 |
vulnerable | 2026-06-08 07:02:26.727893 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-8867 |
vulnerable | 2026-06-08 07:00:25.869274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.