CVE-2025-10344 | Perfex CRM 3.2.1 POST Request /projects/project/x name/clientid cross site scripting

September 29, 2025 Yanac

A vulnerability classified as problematic was found in Perfex CRM 3.2.1. Affected by this issue is some unknown functionality of the file /projects/project/x of the component POST Request Handler. Such manipulation of the argument name/clientid leads to cross site scripting.

This vulnerability is listed as CVE-2025-10344. The attack may be performed from remote. There is no available exploit.VulDB Recent EntriesRead More