Medium severity6.5NVD Advisory· Published Jul 31, 2025· Updated Jun 17, 2026

CVE-2025-54757

Description

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a product user, an arbitrary script may be executed on the browser.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PowerCMS/PowerCMSllm-fuzzy
Alfasado Inc./PowerCMSv5
Range: 4.6 and earlier (PowerCMS 4.x series)

Patches

Vulnerability mechanics

References

jvn.jp/en/vu/JVNVU93412964/nvdThird Party Advisory
www.powercms.jp/news/release-powercms-671-531-461.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000