CVE-2025-10345 — HTML injection in Perfex CRM
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the paramet…
Published: 2025-09-29 · CVSS: 5.3 · CVSS 4.0
HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7