Fairsketch: >> Rise Ultimate Project Manager >> 3.9.4 Security Vulnerabilities
FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API.
CVSS Score
6.5
EPSS Score
0.0
Published
2025-11-03
A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.
CVSS Score
6.1
EPSS Score
0.001
Published
2025-09-29