Cross-Site Scripting Vulnerability in FairSketch RISE Ultimate Project Manager & CRM
CVE-2025-56807

6.1MEDIUM

Key Information:

Vendor

FairSketch

Status
RISE Ultimate Project Manager & CRM
Vendor
CVE Published:
29 September 2025

What is CVE-2025-56807?

A cross-site scripting vulnerability exists in FairSketch RISE Ultimate Project Manager & CRM version 3.9.4. This flaw allows an administrator to upload a malicious JavaScript payload via the file explorer within the admin dashboard when creating new folders. If exploited, this could potentially allow an attacker to execute arbitrary scripts in a user's browser, leading to unauthorized access and data compromise. It is crucial for users of this application to review and implement necessary security measures to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://fairsketch.com
https://github.com/aqwainfosec/CVE-2025-56807/

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.