Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-41391 EUVD-2025-23242GHSA-273r-f986-fq9q

Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicious page, an arbitrar…

Published Jul 31, 2025 · Updated Jul 31, 2025 · Assigned by jpcert

Description

Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicious page, an arbitrary script may be executed on the browser.

Affected products

VendorProductAffectedFixed
Alfasado PowerCMS 6.7 and earlier (PowerCMS 6.x series), 5.3 and earlier (PowerCMS 5.x series), 4.6 and earlier (PowerCMS 4.x series) —

References