An HTML injection vulnerability exists in Fairsketch's RISE CRM Framework version 3.8.1. The flaw arises from insufficient validation of user input in the 'title' parameter of the '/projects/save' POST request, allowing injection of arbitrary HTML code. This vulnerability can lead to partial compromise of confidentiality and integrity but does not affect availability.