https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:03:15.404472+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-41040 CVE-2025-41040 — Stored Cross-Site Scripting vulnerability in appRain CMF 2026-10-04T22:03:15.420868+00:00

Affected: appRain CMF

A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'data[code]', 'data[lang][0][key]', 'data[lang][0][value]', 'data[lang][1][key]' and 'data[title]' parameters in /apprain/developer/language/lipsum.xml.