CVE-2026-7783: CodeCanyon Perfex CRM Admin Kanban Endpoint AbstractKanban.php applySortQuery sql injection
A flaw has been found in CodeCanyon Perfex CRM up to 3.4.1. This vulnerability affects the function AbstractKanban::applySortQuery of the file application/services/AbstractKanban.php of the component Admin Kanban Endpoint. This manipulation of the argument this causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-7783?
CVE-2026-7783 has been classified with a moderate severity rating due to its potential for SQL injection.
How do I fix CVE-2026-7783?
To remediate CVE-2026-7783, upgrade CodeCanyon Perfex CRM to version 3.4.2 or later.
What versions of CodeCanyon Perfex CRM are affected by CVE-2026-7783?
CVE-2026-7783 affects CodeCanyon Perfex CRM versions up to and including 3.4.1.
What component of CodeCanyon Perfex CRM is vulnerable in CVE-2026-7783?
The vulnerability in CVE-2026-7783 is found in the AbstractKanban::applySortQuery function within the Admin component.
What type of vulnerability is CVE-2026-7783?
CVE-2026-7783 is an SQL injection vulnerability that allows attackers to interfere with the queries made to the database.