Perfexcrm Perfex Crm — known CVE vulnerabilities

Every CVE whose affected-product data names Perfexcrm Perfex Crm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (13)

• CVE-2017-17976 — CVSS 9.8 (critical): In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.
• CVE-2025-10342 — CVSS 6.1 (medium): HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by…
• CVE-2025-10341 — CVSS 6.1 (medium): HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by…
• CVE-2025-10343 — CVSS 6.1 (medium): HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by…
• CVE-2025-10344 — CVSS 6.1 (medium): HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by…
• CVE-2025-10345 — CVSS 6.1 (medium): HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by…
• CVE-2025-10346 — CVSS 6.1 (medium): HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by…
• CVE-2021-40303 — CVSS 5.4 (medium): perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.
• CVE-2024-44851 — CVSS 5.4 (medium): A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web…
• CVE-2020-28961 — CVSS 5.4 (medium): Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the…
• CVE-2025-2974 — CVSS 3.5 (low): A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code…
• CVE-2024-8867 — CVSS 3.5 (low): A vulnerability was found in Perfex CRM 3.1.6. It has been declared as problematic. This vulnerability affects unknown code of the file…
• CVE-2025-3219 — CVSS 3.5 (low): A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the…