CVE-2025-41396
CVE-2025-41396
A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
Alfasado Inc. · PowerCMSWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →