← CVE Intelligence

CVE-2025-29993

Alfasado Inc. / PowerCMS 6.x series PUBLISHED

Description (CNA)

The affected versions of PowerCMS allow HTTP header injection. This vulnerability can be leveraged to direct the affected product to send email with a tampered URL, such as password reset mail.

Affected (CNA)

Vendor / productVersions
Alfasado Inc. / PowerCMS 6.x seriesaffected 6.6 and earlier
Alfasado Inc. / PowerCMS 5.x seriesaffected 5.27 and earlier
Alfasado Inc. / PowerCMS 4.x seriesaffected 4.58 and earlier

CWE

CWE-74

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.