HTML Injection Vulnerability in Fairsketch's RISE CRM Framework

CVE-2025-41105

What is CVE-2025-41105?

The vulnerability arises from an HTML code injection flaw within Fairsketch's RISE CRM Framework v3.8.1. This security issue is triggered by insufficient validation of user inputs when sending a POST request, specifically in the 'title' parameter at the '/tickets/save' endpoint. Attackers could exploit this weakness to inject malicious HTML content, potentially leading to unauthorized actions or disclosure of sensitive information.

References