medium6.1
CVE-2025-56807
A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using …
Impact
A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fairsketch | Rise Ultimate Project Manager | Version 3.9.4 |