MEDIUM 5.4 NVD

CVE-2026-36392

FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated administrator can inject arbitrary JavaScript into an item's tit

FairSketch Rise CRM Version 3.9.6 is vulnerable to Cross Site Scripting (XSS). An authenticated administrator can inject arbitrary JavaScript into an item's title, which is stored server-side and executed in the browser of any client user who visits the store page, enabling session hijacking, account takeover, and phishing.

References

https://github.com/moksh-nfsu/CVE-2026-36392
https://github.com/moksh-nfsu/CVE-2026-36392

Published: 2026-09-10 · Source: NVD · Feed updated: 2026-09-11

This medium severity vulnerability with a CVSS score of 5.4 was published on 2026-09-10 via NVD.

vulnfeed aggregates 13138 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.