appRain CMF Authenticated Reflected Cross-Site Scripting Vulnerability

In appRain CMF version 4.0.5, an authenticated reflected cross-site scripting vulnerability has been identified. This issue arises from inadequate validation of user input, specifically through the 'page' parameter in the '/apprain/developer/addons' endpoint.

Impact

Exploitation of this vulnerability allows for authenticated reflected cross-site scripting, where an attacker can inject malicious scripts that are executed in the context of the user's browser.