CVE-2025-41441

Name of the Vulnerable Software and Affected Versions Mailform Pro CGI versions prior to 4.3.4

Description The issue allows a remote unauthenticated attacker to obtain coupon codes due to error messages containing sensitive information. This only affects products that use the coupon feature.

Recommendations For versions prior to 4.3.4, update to version 4.3.4 or later to resolve the issue. As a temporary workaround, consider disabling the coupon feature until a patch is available. Restrict access to error messages to minimize the risk of exploitation.