Alfasado

12 results · Feed

• Medium 6.1
  CVE-2025-36563

  Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator access…

  Alfasado PowerCMS
  Jul 31, 2025
• Medium 5.4
  CVE-2025-41391

  Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicio…

  Alfasado PowerCMS
  Jul 31, 2025
• Medium 5.4
  CVE-2025-41396

  A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwr…

  Alfasado PowerCMS
  Jul 31, 2025
• High 7.2
  CVE-2025-46359 Public exploit

  A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator m…

  Alfasado PowerCMS
  Jul 31, 2025
• Medium 6.5
  CVE-2025-54752

  Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malform…

  Alfasado PowerCMS
  Jul 31, 2025
• Medium 6.5
  CVE-2025-54757

  Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malic…

  Alfasado PowerCMS
  Jul 31, 2025
• Medium 5.3
  CVE-2025-29993

  The affected versions of PowerCMS allow HTTP header injection. This vulnerability can be leveraged to direct the affect…

  Alfasado PowerCMS 5.x series PowerCMS 6.x series PowerCMS 4.x series
  Mar 27, 2025
• Unscored —
  CVE-2023-50297

  Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to …

  Alfasado PowerCMS (PowerCMS 6 Series) PowerCMS (PowerCMS 4 Series) PowerCMS (PowerCMS 5 Series)
  Dec 26, 2023
• Unscored —
  CVE-2023-49117

  PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability. If this vulnerability…

  Alfasado PowerCMS (PowerCMS 6 Series) PowerCMS (PowerCMS 4 Series) PowerCMS (PowerCMS 5 Series)
  Dec 26, 2023
• Unscored —
  CVE-2022-33941

  PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted m…

  Alfasado PowerCMS XMLRPC API
  Sep 8, 2022
• Unscored —
  CVE-2021-20850

  PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2…

  Alfasado PowerCMS XMLRPC API
  Nov 24, 2021
• Unscored —
  CVE-2019-6020

  Open redirect vulnerability in PowerCMS 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and…

  Alfasado PowerCMS
  Dec 26, 2019