Known vulnerabilities in PowerCMS

Software: PowerCMS
Software CPE: cpe:2.3:a:alfasado:powercms:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting PowerCMS PowerCMS is affected by 13 known vulnerabilities: 2 high, 6 medium, 5 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113580 - Unrestricted Upload of File with Dangerous Type
CVE-2025-54757
CWE-434 Medium
No
No
4.61, 5.31, 6.71 01.08.2025 SB2025080109
#VU113579 - Improper Neutralization of Formula Elements in a CSV File
CVE-2025-54752
CWE-1236 Medium
No
No
4.61, 5.31, 6.71 01.08.2025 SB2025080109
#VU113578 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-46359
CWE-22 Low
No
No
4.61, 5.31, 6.71 01.08.2025 SB2025080109
#VU113577 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-41396
CWE-22 Medium
No
No
4.61, 5.31, 6.71 01.08.2025 SB2025080109
#VU113576 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-41391
CWE-79 Low
No
No
4.61, 5.31, 6.71 01.08.2025 SB2025080109
#VU113575 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-36563
CWE-79 Low
No
No
4.61, 5.31, 6.71 01.08.2025 SB2025080109
#VU106238 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2025-29993
CWE-74 Medium
No
No
4.59, 5.28, 6.61 28.03.2025 SB2025032829
#VU84774 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-50297
CWE-601 Low
No
No
4.55, 5.25, 6.40 26.12.2023 SB2023122618
#VU84773 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-49117
CWE-79 Low
No
No
4.55, 5.25, 6.40 26.12.2023 SB2023122618
#VU66938 - Command injection
CVE-2022-33941
CWE-77 High
No
No
- 02.09.2022 SB2022090216
#VU64914 - Incorrect Regular Expression
CVE-2021-21252
CWE-185 Medium
No
No
4.59, 5.28, 6.61 04.07.2022 SB2021021909
SB2023032835
SB2025032829
#VU58334 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2021-20850
CWE-78 High
No
No
- 24.11.2021 SB2021112401
#VU22184 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2019-6020
CWE-601 Medium
No
No
3.294, 4.43, 5.13 23.10.2019 SB2019102309