CVE-2025-41106: Multiple vulnerabilities in Fairsketch's RISE CRM Framework
Published Nov 11, 2025
·Updated
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'firstname' in '/clients/savecontact/'.
Affected Software
2 affected components
Fairsketch RISE CRM Framework
Fairsketch Rise Ultimate Project Manager<3.9
Remediation
Information
These vulnerabilities have been fixed by the Fairsketch team in version 3.9.
Event History
Nov 11, 2025
CVE Published
via MITRE·12:21 PM
Data Sourced
via MITRE·12:21 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-41106?
CVE-2025-41106 is considered a high-severity HTML injection vulnerability.
2
How do I fix CVE-2025-41106?
Fixing CVE-2025-41106 involves implementing proper input validation and sanitization on user inputs for the 'first_name' parameter.
3
What software is affected by CVE-2025-41106?
CVE-2025-41106 affects Fairsketch's RISE CRM Framework version 3.8.1.
4
What type of attack can be executed through CVE-2025-41106?
An attacker can execute HTML injection attacks by exploiting the vulnerability in CVE-2025-41106.
5
Is the vulnerability CVE-2025-41106 remotely exploitable?
Yes, CVE-2025-41106 can be remotely exploited through crafted POST requests.