CVE-2023-49117: vulnerability in Alfasado Inc. PowerCMS (PowerCMS 4 Series)
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 0.3%
PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.
Affected products
Alfasado Inc. · PowerCMS (PowerCMS 4 Series)Alfasado Inc. · PowerCMS (PowerCMS 5 Series)Alfasado Inc. · PowerCMS (PowerCMS 6 Series)Related CVEs — Alfasado Inc. PowerCMS (PowerCMS 4 Series)
In the same product, most dangerous first.