# cve.now: Apprain

The newest entries naming Apprain as an affected vendor (up to 200), of 33 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2024-58279](https://cve.now/CVE-2024-58279.md): appRain CMF 4.0.5 Authenticated Remote Code Execution via Filemanager Upload (CVSS 8.6)
- [CVE-2025-41063](https://cve.now/CVE-2025-41063.md): Reflected Cross-Site Scripting vulnerability in appRain CMF (CVSS 4.8)
- [CVE-2025-41062](https://cve.now/CVE-2025-41062.md): Reflected Cross-Site Scripting vulnerability in appRain CMF (CVSS 4.8)
- [CVE-2025-41061](https://cve.now/CVE-2025-41061.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41060](https://cve.now/CVE-2025-41060.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41059](https://cve.now/CVE-2025-41059.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41058](https://cve.now/CVE-2025-41058.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41057](https://cve.now/CVE-2025-41057.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41056](https://cve.now/CVE-2025-41056.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41055](https://cve.now/CVE-2025-41055.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41054](https://cve.now/CVE-2025-41054.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41053](https://cve.now/CVE-2025-41053.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41052](https://cve.now/CVE-2025-41052.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41051](https://cve.now/CVE-2025-41051.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41050](https://cve.now/CVE-2025-41050.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41049](https://cve.now/CVE-2025-41049.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41048](https://cve.now/CVE-2025-41048.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41047](https://cve.now/CVE-2025-41047.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41046](https://cve.now/CVE-2025-41046.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41045](https://cve.now/CVE-2025-41045.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41044](https://cve.now/CVE-2025-41044.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41043](https://cve.now/CVE-2025-41043.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41042](https://cve.now/CVE-2025-41042.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41041](https://cve.now/CVE-2025-41041.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41040](https://cve.now/CVE-2025-41040.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41039](https://cve.now/CVE-2025-41039.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41038](https://cve.now/CVE-2025-41038.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41037](https://cve.now/CVE-2025-41037.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41036](https://cve.now/CVE-2025-41036.md): Stored Cross-Site Scripting vulnerability in appRain CMF (CVSS 5.1)
- [CVE-2025-41035](https://cve.now/CVE-2025-41035.md): Path Traversal vulnerability in appRain CMF (CVSS 7.1)
- [CVE-2025-41034](https://cve.now/CVE-2025-41034.md): SQL injection vulnerability in appRain CMF (CVSS 8.7)
- [CVE-2025-41033](https://cve.now/CVE-2025-41033.md): SQL injection vulnerability in appRain CMF (CVSS 8.7)
- [CVE-2025-41032](https://cve.now/CVE-2025-41032.md): SQL injection vulnerability in appRain CMF (CVSS 8.7)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/apprain
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.