← CVE Intelligence

CVE-2025-54757

Alfasado Inc. / PowerCMS PUBLISHED

Description (CNA)

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a product user, an arbitrary script may be executed on the browser.

Affected (CNA)

Vendor / productVersions
Alfasado Inc. / PowerCMSaffected 6.7 and earlier (PowerCMS 6.x series)
Alfasado Inc. / PowerCMSaffected 5.3 and earlier (PowerCMS 5.x series)
Alfasado Inc. / PowerCMSaffected 4.6 and earlier (PowerCMS 4.x series)

CWE

CWE-434

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.