Unrestricted File Upload in PowerCMS Affects Multiple Versions
CVE-2025-54757
5.1MEDIUM
What is CVE-2025-54757?
Multiple versions of PowerCMS are affected by a vulnerability that allows the unrestricted upload of dangerous files. This can lead to serious security risks, including the potential execution of arbitrary scripts on the browser if a product administrator unknowingly accesses a malicious file uploaded by a user. It is crucial for administrators to implement mitigation strategies and ensure their installations are updated to prevent exploitation.
Affected Version(s)
PowerCMS 6.7 and earlier (PowerCMS 6.x series)
PowerCMS 5.3 and earlier (PowerCMS 5.x series)
PowerCMS 4.6 and earlier (PowerCMS 4.x series)