CVE-2025-41105: Multiple vulnerabilities in Fairsketch's RISE CRM Framework
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'title' in '/tickets/save'.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-41105?
CVE-2025-41105 is classified as a medium severity vulnerability due to potential exploitation through HTML injection.
How do I fix CVE-2025-41105?
To fix CVE-2025-41105, implement proper validation and sanitization of user inputs for the 'title' parameter in POST requests.
What impact does CVE-2025-41105 have on users?
CVE-2025-41105 allows an attacker to inject malicious HTML into the application, potentially leading to XSS attacks.
Which version of Fairsketch RISE CRM Framework is affected by CVE-2025-41105?
CVE-2025-41105 affects Fairsketch RISE CRM Framework v3.8.1.
Is user data at risk with CVE-2025-41105?
Yes, user data may be at risk as an attacker can exploit CVE-2025-41105 to manipulate or steal information from affected users.