Fairsketch RISE CRM Framework HTML Injection Vulnerability

A HTML injection vulnerability exists in Fairsketch's RISE CRM Framework version 3.8.1. This vulnerability arises from inadequate validation of user inputs, allowing for HTML code injection. The issue can be exploited by sending a POST request with malicious HTML in the 'title' parameter to the '/projects/save' endpoint.

Impact

Exploitation of this vulnerability allows for HTML injection, where an attacker can inject malicious HTML that could be executed in the context of the user's browser.

Remediation

Users can upgrade to Fairsketch RISE CRM Framework version 3.9 to address this vulnerability.