An HTML injection vulnerability exists in Fairsketch's RISE CRM Framework version 3.8.1. The flaw arises from insufficient validation of user input in the 'title' parameter of the '/tickets/save' POST request, allowing injection of arbitrary HTML code. This vulnerability has a medium severity rating with a CVSS score of 5.4.