← Database

CVE-2025-41102

MEDIUM CVSS: 5.4 Published: 2025-11-11 Modified: 2026-06-17

Description

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/events/save'.

Affected Platforms

Fairsketch Rise Ultimate Project Manager

Weakness Type

CWE-79

References