Perfexcrm: >> Perfex Crm Security Vulnerabilities
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.
CVSS Score
5.4
EPSS Score
0.003
Published
2022-11-08
Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the company name parameter.
CVSS Score
5.4
EPSS Score
0.002
Published
2021-10-22
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
CVSS Score
9.8
EPSS Score
0.166
Published
2018-01-26
Page 2