VULNERABILITY INTELLIGENCE

CVE-2024-8867

CVSS score3.5 LOW

EPSS probability0.48%

CISA KEVNot currently listed

Published2024-09-15

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Description

A vulnerability was found in Perfex CRM 3.1.6. It has been declared as problematic. This vulnerability affects unknown code of the file application/controllers/Clients.php of the component Parameter Handler. The manipulation of the argument message leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.

Weakness classification

cna@vuldb.com: CWE-79

Primary references

cna@vuldb.com — Exploit, Mitigation, Third Party Advisory
cna@vuldb.com — Permissions Required, Third Party Advisory, VDB Entry
cna@vuldb.com — Permissions Required, Third Party Advisory, VDB Entry
cna@vuldb.com — Exploit, Third Party Advisory, VDB Entry