VULNERABILITY INTELLIGENCE

CVE-2025-56807

CVSS score6.1 MEDIUM

EPSS probability0.23%

CISA KEVNot currently listed

Published2025-09-29

Last modified2026-07-05

Description

A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an administrator to store a JavaScript payload using the file explorer in the admin dashboard when creating new folders.