CVE-2025-56807

Publication date

2025-09-29 00:00:00

Family

mitre

State

PUBLISHED

Description

A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.