Unrated severityNVD Advisory· Published Sep 10, 2026
CVE-2026-36392
CVE-2026-36392
Description
FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated administrator can inject arbitrary JavaScript into an item's title, which is stored server-side and executed in the browser of any client user who visits the store page, enabling session hijacking, account takeover, and phishing.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3(expand)+ 1 more
- (no CPE)
- (no CPE)
- Range: =3.9.6
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.