CVE-2025-41045 | appRain CMF 4.0.5 ethical data[sconfig][ethical_licensekey] cross site scripting

A vulnerability was found in appRain CMF 4.0.5. It has been classified as problematic. Affected by this vulnerability is an unknown functionality of the file /apprain/admin/config/ethical. Performing manipulation of the argument data[sconfig][ethical_licensekey] results in cross site scripting.

This vulnerability is cataloged as CVE-2025-41045. It is possible to initiate the attack remotely. There is no exploit available.