CVE-2021-20850: vulnerability in Alfasado Inc. PowerCMS XMLRPC API
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.5%
PowerCMS XMLRPC API of PowerCMS 5.19 and earlier, PowerCMS 4.49 and earlier, PowerCMS 3.295 and earlier, and PowerCMS 2 Series (End-of-Life, EOL) allows a remote attacker to execute an arbitrary OS command via unspecified vectors.
Affected products
Alfasado Inc. · PowerCMS XMLRPC APIRelated CVEs — Alfasado Inc. PowerCMS XMLRPC API
In the same product, most dangerous first.