CVE-2025-41106 — Multiple vulnerabilities in Fairsketch's RISE CRM Framework

CVE-2025-41106

Multiple vulnerabilities in Fairsketch's RISE CRM Framework PUBLISHED

Description (CNA)

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'first_name' in '/clients/save_contact/'.

Affected (CNA)

Vendor / product	Versions
Fairsketch / RISE CRM Framework	affected prior to 3.9

CWE

CWE-79

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fairsketchs-rise-crm-framework

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.