Critical severity9.8NVD Advisory· Published Nov 24, 2021· Updated Jun 17, 2026

CVE-2021-20850

Description

PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerCMS/PowerCMSllm-fuzzy
Range: <=5.19, <=4.49, <=3.295, 2 Series (EOL)
Alfasado Inc./PowerCMS XMLRPC APIv5
Range: PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, PowerCMS 2 Series (End-of-Life, EOL)

Patches

Vulnerability mechanics

References

www.powercms.jp/news/release-patch-xmlrpc-api-202110.htmlnvdPatchVendor Advisory
jvn.jp/en/jp/JVN17645965/index.htmlnvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000