Customer Engagement & Loyalty Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:perx_technologies:customer_engagement_&_loyalty_platform:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Perx Technologies (fa5d7960-61ce-53f0-9918-7eef3e9b822a) |
|---|---|
| Product | Customer Engagement & Loyalty Platform (fb809d2b-1726-5c2f-9e73-f8bc7615dc0c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-11682 |
vulnerable | 2026-06-08 07:04:28.769726 |
Stored Cross-Site Scripting in Perx Customer Engagement & Loyalty Platform
Stored cross-site scripting (XSS) vulnerability in the LMT Dashboard of the Perx Customer Engagement & Loyalty Platform allows an authenticated attacker to execute arbitrary JavaScript code in a victim's browser. The vulnerability is due to improper sanitization of SVG file uploads. An attacker can upload a malicious SVG file containing a script payload to a campaign. When another user views this image on the public LMT microsite, the script executes, which can lead to session hijacking, data theft, or other unauthorized actions.This issue affects Customer Engagement & Loyalty Platform before 4.617.4.
Published: 2025-10-27T07:39:54.263Z
Updated: 2025-10-27T17:25:18.430Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.