CVE-2025-41101: Multiple vulnerabilities in Fairsketch's RISE CRM Framework
Published Nov 11, 2025
·Updated
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in'/projects/save'.
Affected Software
2 affected components
Fairsketch RISE CRM Framework
Fairsketch Rise Ultimate Project Manager<3.9
Remediation
Information
These vulnerabilities have been fixed by the Fairsketch team in version 3.9.
Event History
Nov 11, 2025
CVE Published
via MITRE·11:50 AM
Data Sourced
via MITRE·11:50 AM
RemedyDescriptionWeakness
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-41101?
CVE-2025-41101 has been classified with a high severity due to the potential for HTML injection attacks.
2
How do I fix CVE-2025-41101?
To fix CVE-2025-41101, implement proper validation and sanitization of user inputs for the 'title' parameter in the '/projects/save' endpoint.
3
Who is affected by CVE-2025-41101?
CVE-2025-41101 affects users of Fairsketch's RISE CRM Framework v3.8.1.
4
What kind of attacks can CVE-2025-41101 lead to?
CVE-2025-41101 can lead to HTML injection attacks that may compromise user data and application integrity.
5
Is CVE-2025-41101 a remote attack vector?
Yes, CVE-2025-41101 can be exploited remotely through crafted POST requests.