Unrated severityNVD Advisory· Published Jul 31, 2025· Updated Jul 31, 2025
CVE-2025-54757
CVE-2025-54757
Description
Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a product user, an arbitrary script may be executed on the browser.
Affected products
2- Alfasado Inc./PowerCMSv5Range: 4.6 and earlier (PowerCMS 4.x series)
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.