Codecanyon Perfex Crm vulnerabilities

CVE-2026-7782 [MEDIUM] CWE-285 CVE-2026-7782: A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients A vulnerability was detected in CodeCanyon Perfex CRM up to 3.4.1. This affects the function Clients::project of the file application/controllers/Clients.php of the component Tenant Handler. The manipulation of the argument ID results in authorization bypass. The attack may be performed from remote. The exploit is now public and may be used.

CVE-2026-7783 [MEDIUM] CWE-74 CVE-2026-7783: A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the function A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the function AbstractKanban::applySortQuery of the file application/services/AbstractKanban.php of the component Admin Kanban Endpoint. This manipulation of the argument this causes sql injection. It is possible to initiate the attack remotely. The exploit has been pu

CVE-2025-3219 [MEDIUM] CWE-79 CVE-2025-3219: A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Aff A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been

CVE-2025-2974 [MEDIUM] CWE-79 CVE-2025-2974: A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. T A vulnerability has been found in CodeCanyon Perfex CRM up to 3.2.1 and classified as problematic. This vulnerability affects unknown code of the file /contract of the component Contracts. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be