An HTML injection vulnerability exists in Fairsketch's RISE CRM Framework version 3.8.1. The flaw arises from insufficient validation of user input in the 'reply_message' parameter of the '/messages/reply' endpoint, allowing HTML code injection. This vulnerability can lead to partial compromise of confidentiality and integrity but does not affect availability.