Perfexcrm
6 CVEs tracked since 2025. Since Sep 2025, none of them reached CISA KEV.
Perfexcrm CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2025-09 | 6 | 0 |
Products
The products that kept showing up in Perfexcrm's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 13 most recently published vulnerabilities affecting Perfexcrm.
- CVE-2025-10346HTML injection in Perfex CRM6.1
- CVE-2025-10345HTML injection in Perfex CRM6.1
- CVE-2025-10344HTML injection in Perfex CRM6.1
- CVE-2025-10343HTML injection in Perfex CRM6.1
- CVE-2025-10342HTML injection in Perfex CRM6.1
- CVE-2025-10341HTML injection in Perfex CRM6.1
- CVE-2025-3219CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting3.5
- CVE-2025-2974CodeCanyon Perfex CRM Contracts contract cross site scripting3.5
- CVE-2024-8867Perfex CRM Parameter Clients.php cross site scripting3.5
- CVE-2024-44851A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Co...5.4
- CVE-2021-40303perfex crm 1.10 is vulnerable to Cross Site Scripting (XSS) via /clients/profile.5.4
- CVE-2020-28961Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the company name parameter.5.4
- CVE-2017-17976In Utilities.php in Perfex CRM 1.9.7, Unrestricted file upload can lead to remote code execution.9.8
The record
- Peak rank
- #129 in Sep 2025
- Busiest month shown
- Sep 2025, 6 CVEs
- Months with a KEV entry
- 0 since Sep 2025
- Monthly snapshots
- 1 since 2025