CVE-2025-41062

Publication date

2025-09-04 11:16:03

Family

INCIBE

State

PUBLISHED

Description

A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through the page parameter in /apprain/developer/addons.