appRain 4.0.5
Approved changes feed: RSS · Atom
cpe:2.3:a:apprain:apprain:4.0.5:*:*:*:*:*:*:*
part: a version: 4.0.5 update: *
| Vendor | Apprain (0c82b4e3-f406-5c7a-9058-b6b6a5eb81ff) |
|---|---|
| Product | Apprain (9decfead-e965-56c5-abaa-a4b521348afa) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/apprain/apprain-source |
purl2cpe | 2026-06-01 10:16:06.980461 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41063 |
vulnerable | 2026-06-08 07:25:06.563339 |
Reflected Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through the 's' parameter in /apprain/developer/debug-log/db.
Published: 2025-09-04T11:16:15.444Z
Updated: 2025-09-04T13:30:51.779Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41062 |
vulnerable | 2026-06-08 07:25:06.563034 |
Reflected Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through the 'page' parameter in /apprain/developer/addons.
Published: 2025-09-04T11:16:03.297Z
Updated: 2025-09-04T13:34:04.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41061 |
vulnerable | 2026-06-08 07:25:06.562613 |
Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters in /apprain/developer/addons/update/uploadify.
Published: 2025-09-04T11:15:03.846Z
Updated: 2025-09-04T13:35:37.464Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41060 |
vulnerable | 2026-06-08 07:25:06.562202 |
Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters in /apprain/developer/addons/update/tree.
Published: 2025-09-04T11:14:53.885Z
Updated: 2025-09-04T13:40:51.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41059 |
vulnerable | 2026-06-08 07:25:06.561776 |
Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters in /apprain/developer/addons/update/tablesorter.
Published: 2025-09-04T11:14:41.434Z
Updated: 2025-09-04T13:45:58.595Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41058 |
vulnerable | 2026-06-08 07:25:06.561369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41057 |
vulnerable | 2026-06-08 07:25:06.560955 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41056 |
vulnerable | 2026-06-08 07:25:06.560453 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41055 |
vulnerable | 2026-06-08 07:25:06.560029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41054 |
vulnerable | 2026-06-08 07:25:06.559584 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41053 |
vulnerable | 2026-06-08 07:25:06.559165 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41052 |
vulnerable | 2026-06-08 07:25:06.558747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41051 |
vulnerable | 2026-06-08 07:25:06.558445 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41050 |
vulnerable | 2026-06-08 07:25:06.558143 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41049 |
vulnerable | 2026-06-08 07:25:06.557547 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41048 |
vulnerable | 2026-06-08 07:25:06.557141 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41047 |
vulnerable | 2026-06-08 07:25:06.556667 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41046 |
vulnerable | 2026-06-08 07:25:06.556366 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41045 |
vulnerable | 2026-06-08 07:25:06.555958 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41044 |
vulnerable | 2026-06-08 07:25:06.555524 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41043 |
vulnerable | 2026-06-08 07:25:06.555228 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41042 |
vulnerable | 2026-06-08 07:25:06.554920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41041 |
vulnerable | 2026-06-08 07:25:06.554484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41040 |
vulnerable | 2026-06-08 07:25:06.553920 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41039 |
vulnerable | 2026-06-08 07:25:06.553621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41038 |
vulnerable | 2026-06-08 07:25:06.553116 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41037 |
vulnerable | 2026-06-08 07:25:06.552813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41036 |
vulnerable | 2026-06-08 07:25:06.552375 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41035 |
vulnerable | 2026-06-08 07:25:06.551942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41034 |
vulnerable | 2026-06-08 07:25:06.551648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41033 |
vulnerable | 2026-06-08 07:25:06.551325 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41032 |
vulnerable | 2026-06-08 07:25:06.550980 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58279 |
vulnerable | 2026-06-08 06:56:14.335030 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.