Threats tagged 'ghsa-8636-gx6g-wh63'

A SQL injection vulnerability exists in CodeCanyon Perfex CRM versions up to 3.4.1 in the AbstractKanban::applySortQuery function within the Admin Kanban Endpoint. This flaw allows remote attackers with limited privileges to manipulate SQL queries, potentially impacting confidentiality, integrity, and availability. Exploit code has been published. The vulnerability has a CVSS score of 6.3, indicating a medium severity level.