← All advisories

Medium severity5.4NVD Advisory· Published Jul 31, 2025· Updated Jun 17, 2026

CVE-2025-41396

CVE-2025-41396

Description

A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Alfasado Inc./PowerCMScpe-rescue
Range: 4.6 and earlier (PowerCMS 4.x series)
PowerCMS/PowerCMSllm-fuzzy
Alfasado/Powercms
cpe:2.3:a:alfasado:powercms:*:*:*:*:*:*:*:*
Range: >=4.0,<4.61

Patches

Vulnerability mechanics

References

2

jvn.jp/en/vu/JVNVU93412964/nvdThird Party Advisory
www.powercms.jp/news/release-powercms-671-531-461.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.