Skip to contentAlfasado Inc. Powercms vulnerabilities
- alfasado powercmsReflected cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a...CVE-2025-365635.3 Medium
- alfasado powercmsStored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product...CVE-2025-413915.1 Medium
- alfasado powercmsA path traversal issue exists in file uploading feature of multiple versions of PowerCMS....CVE-2025-413965.3 Medium
- alfasado powercmsA path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A...CVE-2025-46359Public exploit8.6 High
- alfasado powercmsMultiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product...CVE-2025-547524.8 Medium
- alfasado powercmsMultiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product...CVE-2025-547575.1 Medium
- alfasado inc. powercms 4.x series, powercms 5.x series, powercms 6.x series +2 moreThe affected versions of PowerCMS allow HTTP header injection. This vulnerability can be...CVE-2025-299935.3 Medium
- alfasado powercms, alfasado inc. powercms (powercms 4 series), powercms (powercms 5 series) +1 more +3 moreOpen redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote...CVE-2023-502976.1 Medium
- alfasado powercms, alfasado inc. powercms (powercms 4 series), powercms (powercms 5 series) +1 more +3 morePowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability....CVE-2023-491175.4 Medium
- alfasado powercms, alfasado inc. powercms xmlrpc api +1 morePowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending...CVE-2022-339419.8 Critical
- alfasado powercms, alfasado inc. powercms xmlrpc api +1 morePowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and...CVE-2021-208509.8 Critical
- alfasado powercmsOpen redirect vulnerability in PowerCMS 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier ...CVE-2019-60206.1 Medium