CVE-2025-63293

FairSketch Rise Ultimate Project Manager & CRM version 3.9.4 is vulnerable to Insecure Permissions due to a lack of authorization checks in the ticketing/commenting API . A remote authenticated user can exploit this flaw to append comments or upload attachments to tickets for which they lack the ...