A vulnerability was found in appRain CMF 4.0.5 and classified as problematic. Affected is an unknown function of the file /apprain/page/manage-static-pages/create. Such manipulation of the argument data[Page][name] leads to cross site scripting.
This vulnerability is listed as CVE-2025-41044. The attack may be performed from remote. There is no available exploit.
