HTML Injection in Fairsketch RISE CRM Framework Affects User Input Validation
CVE-2025-41104
5.1MEDIUM
What is CVE-2025-41104?
An HTML injection vulnerability exists in Fairsketch's RISE CRM Framework version 3.8.1, resulting from insufficient validation of user inputs. The vulnerability is triggered through a POST request that manipulates the 'custom_field_1' parameter in the '/estimate_requests/save_estimate_request' endpoint. Attackers exploiting this weakness could inject malicious HTML content, potentially leading to unauthorized access or manipulation of application behavior.
Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
RISE CRM Framework prior to 3.9
References
CVSS V4
Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Gonzalo Aguilar GarcĂa (6h4ack)