CVE-2025-41106
11.11.2025, 13:15
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request inparameter 'first_name' in '/clients/save_contact/'.
| Vendor | Product | Version |
|---|---|---|
| fairsketch | rise_ultimate_project_manager | 𝑥 < 3.9 |
𝑥
= Vulnerable software versions