CVE-2025-41104 MEDIUM

CVE-2025-41104: Multiple vulnerabilities in Fairsketch's RISE CRM Framework

Vendor Fairsketch
Product RISE CRM Framework
Weakness CWE-79 · XSS
Published November 11, 2025
Last update November 14, 2025
View on NVD All CVEs

CVSS base score

5.1/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N

What the vulnerability does

01Description

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'custom_field_1' in '/estimate_requests/save_estimate_request'.

Key dates

02Disclosure timeline

November 11, 2025 CVE published
November 14, 2025 Record updated