CVE-2025-41063

Publication date

2025-09-04 11:16:15

Family

INCIBE

State

PUBLISHED

Description

A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through the s parameter in /apprain/developer/debug-log/db.