Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Perfexcrm Subscribe
Filtered by product Perfex Crm
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-40303 1 Perfexcrm 1 Perfex Crm 2022-11-08 N/A 5.4 MEDIUM
perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.
CVE-2020-28961 1 Perfexcrm 1 Perfex Crm 2021-10-28 3.5 LOW 5.4 MEDIUM
Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the company name parameter.
CVE-2017-17976 1 Perfexcrm 1 Perfex Crm 2018-02-08 7.5 HIGH 9.8 CRITICAL
In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.