Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2026-36392 — Proof-of-concept for stored XSS in RISE CRM item title field (CVE-2026-36392), demonstrating session hijacking and account takeover with remediation guidance. | Kitploit
Tools/GitHubGitHub/moksh-nfsu/cve-2026-36392
Vulnerability AnalysisExploitationWeb Application ExploitationWeb SecurityPenetration Testing
GitHubmoksh-nfsu/cve-2026-36392

CVE-2026-36392

Proof-of-concept for stored XSS in RISE CRM item title field (CVE-2026-36392), demonstrating session hijacking and account takeover with remediation guidance.

View Repository
12h 27m agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2026-36392: Stored XSS in RISE CRM Item Title Field

Summary

A stored cross-site scripting (XSS) vulnerability exists in the item title field of RISE CRM (RISE - Ultimate Project Manager & CRM) versions <= 3.9.6. An authenticated administrator can inject arbitrary JavaScript into an item's title, which is stored server-side and executed in the browser of any client user who visits the store page, enabling session hijacking, account takeover, and phishing.

Details

FieldValue
CVE IDCVE-2026-36392
ProductRISE - Ultimate Project Manager & CRM
VendorFairsketch
Affected versions<= 3.9.6
Fixed version4.0
Vulnerability typeStored Cross-Site Scripting
CWECWE-79
CVSS 3.16.4 Medium (/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N)
Discovered byMoksh Jain

Vulnerable Component

  • Module: Items
  • Injection endpoint: /index.php/items (Edit Item → Title field)
  • Trigger endpoint: /index.php/store
  • Parameter: item title
  • Injector role: Admin (authenticated)
  • Victim role: Client (authenticated)

Proof of Concept

  1. Log in as an administrator.
  2. Navigate to /index.php/items and edit any item.
  3. Set the Title field to:
root@kitploit:~
  1. Save the item.
  2. Log in as a client user in a separate session.
  3. Navigate to /index.php/store.
  4. The payload executes in the client's browser, exposing session cookies.

Impact

  • Session hijacking via cookie exfiltration
  • Client account takeover
  • Phishing and redirection attacks against client users
  • Unauthorized actions performed in the victim's authenticated context
  • Affects all client users who view items in the store, making this a high-impact stored XSS in a customer-facing view

Remediation

Upgrade to RISE CRM 4.0 or later. The vendor added input validation on the affected field. Reference vendor changelog: "XSS validation added on some input."

Timeline

  • 2026-02-24: Reported to vendor via CodeCanyon support
  • 2026-02-25: Vendor acknowledged
  • 2026-07-23: Fixed in version 4.0
  • 2026-05-05: CVE-2026-36392 assigned by MITRE
  • 2026-09-07: Public disclosure

References

  • Vendor product page: https://codecanyon.net/item/rise-ultimate-project-manager/15455641
  • CVE record: https://www.cve.org/CVERecord?id=CVE-2026-36392

Credit

Moksh Jain - Linkedin

Download Tool