← Database

CVE-2025-41106

MEDIUM CVSS: 5.4 Published: 2025-11-11 Modified: 2026-06-17

Description

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'first_name' in '/clients/save_contact/'.

Affected Platforms

Fairsketch Rise Ultimate Project Manager

Weakness Type

CWE-79

References