CVE-2025-41106

< 3.9

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack

5.4MEDIUM

CVE-2025-41105

< 3.9

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack

5.4MEDIUM

CVE-2025-41104

< 3.9

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack

5.4MEDIUM

CVE-2025-41103

< 3.9

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack

5.4MEDIUM

CVE-2025-41102

< 3.9

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack

5.4MEDIUM

CVE-2025-41101

< 3.9

HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack

5.4MEDIUM

CVE-2025-63293

all versions

FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append

6.5MEDIUM

CVE-2025-60378

< 3.9.4

Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HTML into invoices and

8.1HIGH

CVE-2025-56807

all versions

A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to stor

6.1MEDIUM

CVE-2025-3855

all versions

A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic. Affected by this issue

4.3MEDIUM

CVE-2024-8945

all versions

A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical. This vulnerability af

5.5MEDIUM

CVE-2024-0545

all versions

A vulnerability classified as problematic was found in CodeCanyon RISE Ultimate Project Manager 3.5.3. This vulnerability affects

5.3MEDIUM

CVE-2019-18884

all versions

index.php/team_members/add_team_member in RISE Ultimate Project Manager 2.3 has CSRF for adding authorized users.

8.8HIGH

CVE-2017-17999

all versions

SQL injection vulnerability in RISE Ultimate Project Manager 1.9 allows remote attackers to execute arbitrary SQL commands via the

9.8CRITICAL

CVE-2017-11182

all versions

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the My Profile section. All input fields are vulnerable.

5.4MEDIUM

CVE-2017-11181

all versions

In Rise Ultimate Project Manager v1.8, XSS vulnerabilities were found in the Messaging section. Subject and Message fields are vul

5.4MEDIUM