CVE-2025-41036
EUVD-2025-2671004.09.2025, 12:15
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Admin][description]', 'data[Admin][f_name]' and 'data[Admin][l_name]' parameters in /apprain/admin/account/edit.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| apprain | apprain | 4.0.5 |
𝑥
= Vulnerable software versions