An HTML injection vulnerability exists in Fairsketch's RISE CRM Framework version 3.8.1. The flaw arises from insufficient validation of user input in the 'first_name' parameter of the '/clients/save_contact/' POST request, allowing injection of arbitrary HTML code. This vulnerability can lead to partial compromise of confidentiality and integrity but does not affect availability.