Reflected Cross-Site Scripting Vulnerability in PowerCMS by PowerCMS
CVE-2025-36563
5.3MEDIUM
What is CVE-2025-36563?
A reflected cross-site scripting vulnerability has been identified in multiple versions of PowerCMS. This issue arises when a product administrator visits a specially crafted URL, allowing the execution of arbitrary scripts in the browser. This can lead to potential unauthorized actions or data exposure, emphasizing the need for immediate attention and mitigation strategies.
Affected Version(s)
PowerCMS 6.7 and earlier (PowerCMS 6.x series)
PowerCMS 5.3 and earlier (PowerCMS 5.x series)
PowerCMS 4.6 and earlier (PowerCMS 4.x series)