https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 00:19:13 +0000 https://cve.radiocsirt.org/vuln/cve-2025-41039 <p><strong>Affected:</strong> appRain CMF</p> <p>A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the &#39;data[sconfig][admin_landing_page]&#39;, &#39;data[sconfig][currency]&#39;, &#39;data[sconfig][db_version]&#39;, &#39;data[sconfig][default_pagination]&#39;, &#39;data[sconfig][emailsetup_from_email]&#39;, &#39;data[sconfig][emailsetup_host]&#39;, &#39;data[sconfig][emailsetup_password]&#39;, &#39;data[sconfig][emailsetup_port]&#39;, &#39;data[sconfig][emailsetup_username]&#39;, &#39;data[sconfig][fileresource_id]&#39;, &#39;data[sconfig][large_image_height]&#39;, &#39;data[sconfig][large_image_width]&#39; and &#39;data[sconfig][time_zone_padding]&#39; parameters in /apprain/admin/config/opts.</p> <p><strong>Affected:</strong> appRain CMF</p> <p>A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the &#39;data[sconfig][admin_landing_page]&#39;, &#39;data[sconfig][currency]&#39;, &#39;data[sconfig][db_version]&#39;, &#39;data[sconfig][default_pagination]&#39;, &#39;data[sconfig][emailsetup_from_email]&#39;, &#39;data[sconfig][emailsetup_host]&#39;, &#39;data[sconfig][emailsetup_password]&#39;, &#39;data[sconfig][emailsetup_port]&#39;, &#39;data[sconfig][emailsetup_username]&#39;, &#39;data[sconfig][fileresource_id]&#39;, &#39;data[sconfig][large_image_height]&#39;, &#39;data[sconfig][large_image_width]&#39; and &#39;data[sconfig][time_zone_padding]&#39; parameters in /apprain/admin/config/opts.</p> https://cve.radiocsirt.org/vuln/cve-2025-41039