Medium severity5.3NVD Advisory· Published May 26, 2025· Updated Jun 17, 2026

CVE-2025-41441

Description

Mailform Pro CGI prior to 4.3.4 generates error messages containing sensitive information, which may allow a remote unauthenticated attacker to obtain coupon codes. This vulnerability only affects products that use the coupon feature.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Synck/Mailform Pro Cgi
cpe:2.3:a:synck:mailform_pro_cgi:*:*:*:*:*:*:*:*
Range: <4.3.4
Mailform Pro CGI/Mailform Pro CGIllm-fuzzy
Range: <4.3.4
Synck Graphica/Mailform Pro Cgiv5
Range: prior to 4.3.4

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN39546799/nvdThird Party Advisory
www.synck.com/blogs/news/newsroom/detail_1745302910.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000