← CVE Intelligence

CVE-2025-36563

Alfasado Inc. / PowerCMS PUBLISHED

Description (CNA)

Reflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product administrator accesses a crafted URL, an arbitrary script may be executed on the browser.

Affected (CNA)

Vendor / productVersions
Alfasado Inc. / PowerCMSaffected 6.7 and earlier (PowerCMS 6.x series)
Alfasado Inc. / PowerCMSaffected 5.3 and earlier (PowerCMS 5.x series)
Alfasado Inc. / PowerCMSaffected 4.6 and earlier (PowerCMS 4.x series)

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.