CVE-2025-41103: Multiple vulnerabilities in Fairsketch's RISE CRM Framework
Published Nov 11, 2025
·Updated
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'replymessage' in '/messages/reply'.
Affected Software
2 affected components
Fairsketch RISE CRM Framework
Fairsketch Rise Ultimate Project Manager<3.9
Remediation
Information
These vulnerabilities have been fixed by the Fairsketch team in version 3.9.
Event History
Nov 11, 2025
CVE Published
via MITRE·12:16 PM
Data Sourced
via MITRE·12:16 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-41103?
CVE-2025-41103 has been classified as a medium severity vulnerability due to the potential for HTML injection.
2
How do I fix CVE-2025-41103?
To fix CVE-2025-41103, validate and sanitize the 'reply_message' input in POST requests to prevent HTML code injection.
3
What software versions are affected by CVE-2025-41103?
CVE-2025-41103 affects Fairsketch's RISE CRM Framework v3.8.1.
4
What kind of vulnerability is CVE-2025-41103?
CVE-2025-41103 is an HTML injection vulnerability resulting from improper validation of user inputs.
5
Where does CVE-2025-41103 occur within the application?
CVE-2025-41103 occurs in the '/messages/reply' endpoint when processing the 'reply_message' parameter.