CVE Intelligence

Fairsketch vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Fairsketch products: 7 record(s), with severity, exploitation and fixes.

Rise Ultimate Project Manager 7RISE CRM Framework 6

Exploited only (KEV) →

CVE-2025-41106 Medium · 5.4 CWE-79 Nov 11, 2025
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'first_name' in '/clients/save_contact/'.
CVE-2025-41105 Medium · 5.4 CWE-79 Nov 11, 2025
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'.
CVE-2025-41104 Medium · 5.4 CWE-79 Nov 11, 2025
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'custom_field_1' in '/estimate_requests/save_estimate_request'.
CVE-2025-41103 Medium · 5.4 CWE-79 Nov 11, 2025
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'reply_message' in '/messages/reply'.
CVE-2025-41102 Medium · 5.4 CWE-79 Nov 11, 2025
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/events/save'.
CVE-2025-41101 Medium · 5.4 CWE-79 Nov 11, 2025
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in'/projects/save'.
CVE-2025-63293 Medium · 6.5 CWE-862 Nov 3, 2025
Missing Authorization in Fairsketch Rise Ultimate Project Manager
FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API.