CVE-2025-10342 — HTML injection in Perfex CRM
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the paramet…
Published: 2025-09-29 · CVSS: 5.3 · CVSS 4.0
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'name' at the endpoint '/subscriptions/create'.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7