CVE-2025-55903 – Perfex CRM HTML Injection

CVE ID : CVE-2025-55903

Published : Oct. 10, 2025, 8:15 p.m. | 23 minutes ago

Description : A HTML injection vulnerability exists in Perfex CRM v3.3.1. The application fails to sanitize user input in the “Bill To” address field within the estimate module. As a result, arbitrary HTML can be injected and rendered unescaped in client-facing documents.

Severity: 8.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…