CVE-2025-3219: CodeCanyon Perfex CRM Project Discussions Module 2 cross site scripting

Published Apr 4, 2025

Updated

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. It has been classified as problematic. Affected is an unknown function of the file /perfex/clients/project/2 of the component Project Discussions Module. The manipulation of the argument description leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Affected Software

3 affected components

Codecanyon Perfex CRM

Codecanyon Project Discussions Module

Perfexcrm Perfex Crm=3.2.1

Event History

Apr 4, 2025

CVE Published

via MITRE·07:31 AM

Data Sourced

via MITRE·07:31 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-3219?

CVE-2025-3219 is classified as a problematic vulnerability due to its potential for cross-site scripting (XSS) attacks.

How do I fix CVE-2025-3219?

To fix CVE-2025-3219, sanitize user inputs in the Project Discussions Module to prevent script injection.

Which components are affected by CVE-2025-3219?

CVE-2025-3219 affects the Project Discussions Module in CodeCanyon Perfex CRM version 3.2.1.

What type of attack is associated with CVE-2025-3219?

CVE-2025-3219 is associated with cross-site scripting (XSS) attacks that can manipulate the argument description.

Who is the vendor of the affected software for CVE-2025-3219?

The vendor of the affected software for CVE-2025-3219 is CodeCanyon.