Medium severity5.4NVD Advisory· Published Jul 31, 2025· Updated Jun 17, 2026

CVE-2025-41391

Description

Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicious page, an arbitrary script may be executed on the browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerCMS/PowerCMSllm-fuzzy
Alfasado Inc./PowerCMSv5
Range: 4.6 and earlier (PowerCMS 4.x series)

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU93412964/nvdThird Party Advisory
www.powercms.jp/news/release-powercms-671-531-461.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000