CVE-2025-10341: Improper Neutralization of Input During Web Page Generation

HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'company' at the endpoint '/clients/client/x...

CVE-2020-28961: Improper Neutralization of Input During Web Page Generation

Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting XSS vulnerability in the component ./clients/client via the company name parameter...

PT-2021-11611

Name of the Vulnerable Software and Affected Versions: Perfex CRM version 2.4.4 Description: A stored cross-site scripting XSS issue was found in the ./clients/client component of Perfex CRM, specifically via the company name parameter. This allows for malicious script execution when the paramete...