CVE-2025-10341 — HTML injection in Perfex CRM
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the paramet…
Published: 2025-09-29 · CVSS: 5.3 · CVSS 4.0
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'company' at the endpoint '/clients/client/x.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7