CVE-2025-63293 – FairSketch Rise Ultimate Project Manager & CRM Information Disclosure/Privilege Escalation

CVE ID : CVE-2025-63293

Published : Nov. 3, 2025, 9:19 p.m. | 2 hours, 8 minutes ago

Description : FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API.

Severity: 6.5 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…