Skip to content
OpenAdvisories
Medium · 6.1 CVE-2025-36563 EUVD-2025-23241GHSA-hrw8-p8vq-hx3r

Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesses a crafted URL, an…

Published Jul 31, 2025 · Updated Jul 31, 2025 · Assigned by jpcert

Vendor: Alfasado Product: PowerCMS

Description

Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesses a crafted URL, an arbitrary script may be executed on the browser.

Affected products

VendorProductAffectedFixed
Alfasado PowerCMS 6.7 and earlier (PowerCMS 6.x series), 5.3 and earlier (PowerCMS 5.x series), 4.6 and earlier (PowerCMS 4.x series) —

References