PatchTheCVEfairsketch vulnerabilities
Recent CVEs affecting fairsketch products. 5 tracked.
fairsketch has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2025-11-03. Highest priority: CVE-2025-60378 (score 50/100).
- CVE-2025-63293 MEDIUM 6.5 DOWNGRADE FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions
- CVE-2025-60378 HIGH 8.1 UPGRADE Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HT
- CVE-2025-56807 MEDIUM 6.1 DOWNGRADE A cross-site scripting (XSS) vulnerability in FairSketch RISE Ultimate Project Manager & CRM 3.9.4 allows an a
- CVE-2025-3855 MEDIUM 4.3 DOWNGRADE A vulnerability was found in CodeCanyon RISE Ultimate Project Manager 3.8.2 and classified as problematic
- CVE-2024-8945 MEDIUM 5.5 DOWNGRADE A vulnerability has been found in CodeCanyon RISE Ultimate Project Manager 3.7.0 and classified as critical
FAQ
How do I fix fairsketch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fairsketch being exploited right now?
None of the tracked fairsketch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fairsketch CVE should I patch first?
CVE-2025-60378 currently ranks highest (50/100): Stored HTML injection in RISE Ultimate Project Manager & CRM allows authenticated users to inject arbitrary HT.