CVE-2025-41034

Summary: CVE-2025-41034 concerns an SQL injection in appRain CMF 4.0.5. The vulnerability arises from lack of validation of the input in the parameter data[Page][name] used by the /apprain/page/manage-static-pages/create/ endpoint. Impact (as stated): an attacker can retrieve, create, update, and...