Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Multiple vulnerabilities in Fairsketch's RISE CRM Framework
Vulnerability Description
HTML injection vulnerability found in Fairsketch's RISE CRM Framework v3.8.1, which consist of an HTML code injection due to lack of proper validation of user inputs by sending a POST request in parameter 'first_name' in '/clients/save_contact/'.
CVSS Information
N/A
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Fairsketch RISE CRM Framework 跨站脚本漏洞
Vulnerability Description
FairSketch Fairsketch RISE CRM Framework是FairSketch公司的一款团队管理与客户关系管理框架。 Fairsketch RISE CRM Framework 3.8.1版本存在跨站脚本漏洞，该漏洞源于对文件/clients/save_contact中参数first_name的用户输入验证不足，可能导致HTML注入攻击。
CVSS Information
N/A
Vulnerability Type
N/A