Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

appRain CMF — Vulnerabilities & Security Advisories 33

All 33 CVE vulnerabilities found in appRain CMF, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses affecting the appRain CMF content management system developed by appRain. The collection encompasses a broad spectrum of reported flaws, including remote code execution, cross-site scripting, and privilege escalation issues, spanning the product's entire public release history from its initial launch to the present day. Visitors can utilize this resource to track official vendor advisories for appRain, gain a comprehensive understanding of specific weakness classes prevalent in content management frameworks, or review the complete vulnerability timeline for the appRain CMF platform. The data is compiled from multiple public sources to ensure a centralized view of security risks without requiring users to search disparate databases individually. By consolidating these findings, the page serves as a technical reference for security professionals assessing the historical security posture of this specific software. It enables efficient analysis of recurring patterns in the product's codebase and helps administrators prioritize remediation efforts based on the severity and age of disclosed issues. This aggregation supports ongoing security maintenance by providing a clear, chronological record of all known defects that have impacted the system over time.

Vendor: appRain

CVE ID Title CVSS Severity Published
CVE-2024-58279 appRain CMF 4.0.5 Authenticated Remote Code Execution via Filemanager Upload CWE-434 7.2AI High AI 2025-12-10
CVE-2025-41063 Reflected Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41062 Reflected Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41061 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41060 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41059 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41058 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41057 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41056 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41055 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41054 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41053 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41052 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41051 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41050 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41049 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41048 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41047 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41046 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41045 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41044 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41043 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41042 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41041 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41040 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41039 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41038 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41037 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41036 Stored Cross-Site Scripting vulnerability in appRain CMF CWE-79 5.4 - 2025-09-04
CVE-2025-41035 Path Traversal vulnerability in appRain CMF CWE-22 6.5 - 2025-09-04

All 33 known CVE vulnerabilities affecting appRain CMF with full Chinese analysis, references, and POCs where available.