Vendor

Alfasado

12 known vulnerabilities.

Products

PowerCMS 7 PowerCMS XMLRPC API 2 PowerCMS (PowerCMS 6 Series) 2 PowerCMS (PowerCMS 5 Series) 2 PowerCMS (PowerCMS 4 Series) 2 PowerCMS 6.x series 1 PowerCMS 5.x series 1 PowerCMS 4.x series 1

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

Medium 6.1

CVE-2025-36563

Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator access…

Alfasado PowerCMS

Jul 31, 2025
Medium 5.4

CVE-2025-41391

Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicio…

Alfasado PowerCMS

Jul 31, 2025
Medium 5.4

CVE-2025-41396

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwr…

Alfasado PowerCMS

Jul 31, 2025
Medium 6.5

CVE-2025-54752

Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malform…

Alfasado PowerCMS

Jul 31, 2025
Medium 6.5

CVE-2025-54757

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malic…

Alfasado PowerCMS

Jul 31, 2025
Medium 5.3

CVE-2025-29993

The affected versions of PowerCMS allow HTTP header injection. This vulnerability can be leveraged to direct the affect…

Alfasado PowerCMS 6.x series PowerCMS 4.x series PowerCMS 5.x series

Mar 27, 2025