medium6.5
CVE-2025-54757
Multiple versions of PowerCMS allow unrestricted upload of dangerous files.
Impact
Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a product user, an arbitrary script may be executed on the browser.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alfasado | Powercms | from 4.0 before 4.61 from 5.0 before 5.31 from 6.0 before 6.71 |