High severity7.2NVD Advisory· Published Jul 31, 2025· Updated Jun 17, 2026

CVE-2025-46359

Description

A path traversal issue exists in backup and restore feature of multiple versions of PowerCMS. A product administrator may execute arbitrary code by restoring a crafted backup file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerCMS/PowerCMSllm-fuzzy
Alfasado Inc./PowerCMSv5
Range: 4.6 and earlier (PowerCMS 4.x series)

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU93412964/nvdThird Party Advisory
www.powercms.jp/news/release-powercms-671-531-461.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.468
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000