CVE-2025-2974

CVE-2025-2974 affects CodeCanyon Perfex CRM (up to version 3.2.1). The vulnerability lies in the Contracts module, specifically the /contract code, where manipulation of input content enables cross-site scripting (XSS). Exploitation can be remote, and multiple sources note public disclosure of th...

CVE-2025-2974 CodeCanyon Perfex CRM Contracts contract cross site scripting

A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely...