Medium severity6.1NVD Advisory· Published Dec 26, 2019· Updated Jun 17, 2026

CVE-2019-6020

Description

Open redirect vulnerability in PowerCMS 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and earlier (PowerCMS 3.x) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerCMS/PowerCMSllm-fuzzy
Range: <=5.12, <=4.42, <=3.293
Alfasado Inc./PowerCMSv5
Range: 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and earlier (PowerCMS 3.x)

Patches

Vulnerability mechanics

References

jvn.jp/en/jp/JVN34634458/index.htmlnvdThird Party Advisory
www.powercms.jp/news/release-powercms-201910.htmlnvdRelease NotesVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000