CVE-2025-56807 | THREATINT

Description

A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.

PUBLISHED Reserved 2025-08-17 | Published 2025-09-29 | Updated 2025-09-29 | Assigner mitre

References

fairsketch.com

github.com/aqwainfosec/CVE-2025-56807/

cve.org (CVE-2025-56807)

nvd.nist.gov (CVE-2025-56807)

Download JSON