← CVE Intelligence

CVE-2025-41391

Alfasado Inc. / PowerCMS PUBLISHED

Description (CNA)

Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicious page, an arbitrary script may be executed on the browser.

Affected (CNA)

Vendor / productVersions
Alfasado Inc. / PowerCMSaffected 6.7 and earlier (PowerCMS 6.x series)
Alfasado Inc. / PowerCMSaffected 5.3 and earlier (PowerCMS 5.x series)
Alfasado Inc. / PowerCMSaffected 4.6 and earlier (PowerCMS 4.x series)

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.