CVE-2025-41043

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAppReportCodeid' and 'dataAppReportCodename' parameters in /apprain/appreport/manage/...

CVE-2025-41043

CVE-2025-41043 affects appRain CMF 4.0.5. A stored authenticated XSS flaw arises from insufficient validation of user input in the parameters data[AppReportCode][id] and data[AppReportCode][name] within the endpoint /apprain/appreport/manage/ . Exploitation could allow an attacker to inject scrip...