CVE-2025-41104: Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'customfield1' in '/estimaterequests/saveestimaterequest'.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41104?
CVE-2025-41104 is classified as a high severity vulnerability due to its potential for HTML code injection.
How do I fix CVE-2025-41104?
To fix CVE-2025-41104, ensure proper validation and sanitization of user inputs in the 'custom_field_1' parameter.
What impact does CVE-2025-41104 have on my application?
The impact of CVE-2025-41104 includes the potential for unauthorized actions or data exposure through reflected HTML injections.
Which versions of the Fairsketch RISE CRM Framework are affected by CVE-2025-41104?
CVE-2025-41104 affects Fairsketch RISE CRM Framework version 3.8.1.
Is CVE-2025-41104 exploitable through GET requests?
CVE-2025-41104 is specifically exploitable through POST requests made to the '/estimate_requests/save_estimate_request' endpoint.