https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-10346.htmlhttps://patchthecve.com/cve/CVE-2025-10346.htmlMon, 19 Oct 2026 16:10:00 +0000MEDIUM 6.1: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'subject' at the endpoint 'knoewledge_base/article'.https://patchthecve.com/cve/CVE-2025-10345.htmlhttps://patchthecve.com/cve/CVE-2025-10345.htmlMon, 19 Oct 2026 16:10:00 +0000MEDIUM 6.1: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'address' at the endpoint 'admin/leads/lead'.https://patchthecve.com/cve/CVE-2025-10344.htmlhttps://patchthecve.com/cve/CVE-2025-10344.htmlMon, 19 Oct 2026 16:10:00 +0000MEDIUM 6.1: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameters 'name' and 'clientid' at the endpoint '/projects/project/x'.https://patchthecve.com/cve/CVE-2025-10343.htmlhttps://patchthecve.com/cve/CVE-2025-10343.htmlMon, 19 Oct 2026 16:10:00 +0000MEDIUM 6.1: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'expense_name' at the endpoint '/expenses/expense'.https://patchthecve.com/cve/CVE-2025-10342.htmlhttps://patchthecve.com/cve/CVE-2025-10342.htmlMon, 19 Oct 2026 16:10:00 +0000MEDIUM 6.1: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'name' at the endpoint '/subscriptions/create'.https://patchthecve.com/cve/CVE-2025-10341.htmlhttps://patchthecve.com/cve/CVE-2025-10341.htmlMon, 19 Oct 2026 16:10:00 +0000MEDIUM 6.1: HTML injection vulnerability in Perfex CRM v3.2.1 consisting of a stored HTML injection due to lack of proper validation of user input by sending a POST request in the parameter 'company' at the endpoint '/clients/client/x.https://patchthecve.com/cve/CVE-2025-3219.htmlhttps://patchthecve.com/cve/CVE-2025-3219.htmlWed, 17 Jun 2026 09:19:27 +0000LOW 3.5: A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is possibhttps://patchthecve.com/cve/CVE-2025-2974.htmlhttps://patchthecve.com/cve/CVE-2025-2974.htmlWed, 17 Jun 2026 09:07:56 +0000LOW 3.5: A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. Thttps://patchthecve.com/cve/CVE-2024-8867.htmlhttps://patchthecve.com/cve/CVE-2024-8867.htmlWed, 17 Jun 2026 08:23:27 +0000LOW 3.5: A vulnerability was found in Perfex CRM 3.1.6. It has been declared as problematic. This vulnerability affects unknown code of the file application/controllers/Clients.php of the component Parameter Handler. The manipulation of the argument message leads to cross site scripting. The attack can be inhttps://patchthecve.com/cve/CVE-2024-44851.htmlhttps://patchthecve.com/cve/CVE-2024-44851.htmlWed, 17 Jun 2026 07:53:10 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in the Discussion section of Perfex CRM v1.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter.