CVE-2025-41102 | Fairsketch RISE CRM Framework up to 3.8 POST Request /events/save Title cross site scripting

A vulnerability described as problematic has been identified in Fairsketch RISE CRM Framework up to 3.8. The affected element is an unknown function of the file /events/save of the component POST Request Handler. The manipulation of the argument Title results in cross site scripting.

This vulnerability is cataloged as CVE-2025-41102. The attack may be launched remotely. There is no exploit available.

Upgrading the affected component is recommended.