Apprain Cmf
Approved changes feed: RSS · Atom
cpe:2.3:a:apprain:apprain_cmf:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apprain (0c82b4e3-f406-5c7a-9058-b6b6a5eb81ff) |
|---|---|
| Product | Apprain Cmf (32fcbf3a-c20b-5c20-9e32-4d409af6e5d2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-41063 |
vulnerable | 2026-06-08 07:25:06.563308 |
Reflected Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through the 's' parameter in /apprain/developer/debug-log/db.
Published: 2025-09-04T11:16:15.444Z
Updated: 2025-09-04T13:30:51.779Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41062 |
vulnerable | 2026-06-08 07:25:06.562999 |
Reflected Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in version 4.0.5 of appRain CMF, consisting of an authenticated reflected XSS due to a lack of proper validation of user input, through the 'page' parameter in /apprain/developer/addons.
Published: 2025-09-04T11:16:03.297Z
Updated: 2025-09-04T13:34:04.329Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41061 |
vulnerable | 2026-06-08 07:25:06.562581 |
Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters in /apprain/developer/addons/update/uploadify.
Published: 2025-09-04T11:15:03.846Z
Updated: 2025-09-04T13:35:37.464Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41060 |
vulnerable | 2026-06-08 07:25:06.562053 |
Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters in /apprain/developer/addons/update/tree.
Published: 2025-09-04T11:14:53.885Z
Updated: 2025-09-04T13:40:51.313Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41059 |
vulnerable | 2026-06-08 07:25:06.561738 |
Stored Cross-Site Scripting vulnerability in appRain CMF
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[Addon][layouts]' and 'data[Addon][layouts_except]' parameters in /apprain/developer/addons/update/tablesorter.
Published: 2025-09-04T11:14:41.434Z
Updated: 2025-09-04T13:45:58.595Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41058 |
vulnerable | 2026-06-08 07:25:06.561229 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41057 |
vulnerable | 2026-06-08 07:25:06.560830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41056 |
vulnerable | 2026-06-08 07:25:06.560301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41055 |
vulnerable | 2026-06-08 07:25:06.560000 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41054 |
vulnerable | 2026-06-08 07:25:06.559446 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41053 |
vulnerable | 2026-06-08 07:25:06.559012 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41052 |
vulnerable | 2026-06-08 07:25:06.558713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41051 |
vulnerable | 2026-06-08 07:25:06.558414 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41050 |
vulnerable | 2026-06-08 07:25:06.558035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41049 |
vulnerable | 2026-06-08 07:25:06.557406 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41048 |
vulnerable | 2026-06-08 07:25:06.557029 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41047 |
vulnerable | 2026-06-08 07:25:06.556635 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41046 |
vulnerable | 2026-06-08 07:25:06.556239 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41045 |
vulnerable | 2026-06-08 07:25:06.555917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41044 |
vulnerable | 2026-06-08 07:25:06.555493 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41043 |
vulnerable | 2026-06-08 07:25:06.555196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41042 |
vulnerable | 2026-06-08 07:25:06.554775 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41041 |
vulnerable | 2026-06-08 07:25:06.554326 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41040 |
vulnerable | 2026-06-08 07:25:06.553891 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41039 |
vulnerable | 2026-06-08 07:25:06.553481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41038 |
vulnerable | 2026-06-08 07:25:06.553085 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41037 |
vulnerable | 2026-06-08 07:25:06.552668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41036 |
vulnerable | 2026-06-08 07:25:06.552338 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41035 |
vulnerable | 2026-06-08 07:25:06.551911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41034 |
vulnerable | 2026-06-08 07:25:06.551613 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41033 |
vulnerable | 2026-06-08 07:25:06.551284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41032 |
vulnerable | 2026-06-08 07:25:06.549419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-58279 |
vulnerable | 2026-06-08 06:56:14.333594 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.