Browse CVEs

HIGH 8.0 CVE-2025-54752 Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malformed entry and a victim user do… Powercms 4.61 / 5.31+ Fix from $1,9502025-07-31 HIGH 8.0 CVE-2025-54757 Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a produc… Powercms 4.61 / 5.31+ Fix from $1,9502025-07-31 HIGH 7.2 CVE-2025-46359 A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator may execute arbitrary code by r… Powercms 4.61 / 5.31+ Fix from $1,9502025-07-31 MEDIUM 6.5 CVE-2025-41396 A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user. Powercms 4.61 / 5.31+ Fix from $1,6002025-07-31 MEDIUM 5.4 CVE-2025-41391 Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicious page, an arbitrary script m… Powercms 4.61 / 5.31+ Fix from $1,6002025-07-31 MEDIUM 6.1 CVE-2025-36563 Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesses a crafted URL, an arbitrary… Powercms 4.61 / 5.31+ Fix from $1,6002025-07-31 MEDIUM 6.1 CVE-2023-50297 Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to redirect users to arbitrary we… Powercms 4.55 / 5.25+ Fix from $1,6002023-12-26 MEDIUM 5.4 CVE-2023-49117 PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary sc… Powercms 4.55 / 5.25+ Fix from $1,6002023-12-26 CRITICAL 9.8 CVE-2022-33941 PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to Power… Powercms after 6.021 Fix from $2,3002022-09-08 CRITICAL 9.8 CVE-2021-20850 PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) all… Powercms after 5.19 Fix from $2,3002021-11-24 MEDIUM 6.1 CVE-2019-6020 Open redirect vulnerability in PowerCMS 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and earlier (PowerCMS 3.x) allows… Powercms after 5.12 Fix from $1,6002019-12-26