CVE-2025-3219
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 4, 2025
Updated: Apr 7, 2025
CWE ID 79
Summary
CVE-2025-3219 is a newly identified vulnerability affecting the Project Discussions Module of CodeCanyon Perfex CRM version 3.2.1. This issue, classified as problematic, is linked to an unknown function within the file /perfex/clients/project/2. A cross-site scripting (XSS) attack can be initiated by manipulating the description argument. The attack can be executed remotely, increasing the potential reach and impact of the vulnerability. The exploit for this weakness has been made public, raising concerns for potential misuse.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.