Medium severity5.4NVD Advisory· Published Nov 11, 2025· Updated Jun 17, 2026

CVE-2025-41106

Description

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'first_name' in '/clients/save_contact/'.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fairsketch/Rise Ultimate Project Manager
cpe:2.3:a:fairsketch:rise_ultimate_project_manager:*:*:*:*:*:*:*:*
Range: <3.9
Fairsketch/Rise CRM Frameworkllm-fuzzy2 versions
= 3.8.1+ 1 more
- (no CPE)range: = 3.8.1
- (no CPE)range: prior to 3.9

Patches

Vulnerability mechanics

References

www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-fairsketchs-rise-crm-frameworknvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000