CVE-2025-63293: Fairsketch Rise Ultimate Project Manager

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API.

Affected products

• Fairsketch Rise Ultimate Project Manager: version 3.9.4 only

Published 2025-11-03. Last modified 2026-07-05.