Unrated severityNVD Advisory· Published Nov 11, 2025· Updated Nov 14, 2025
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
CVE-2025-41104
Description
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'custom_field_1' in '/estimate_requests/save_estimate_request'.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<=3.8.1+ 1 more
- (no CPE)range: <=3.8.1
- (no CPE)range: prior to 3.9
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.