medium5.4
CVE-2020-28961
Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the company name parameter.
Impact
Perfex CRM v2.4.4 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component ./clients/client via the company name parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Perfexcrm | Perfex Crm | Version 2.4.4 |