CVE-2025-54757

creationtimestamp| type| source ---|---|--- 2025-07-31 11:10:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lvaysibt522c...

CVE-2025-54757

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a product user, an arbitrary script may be executed on the browser...

CVE-2025-54757

CVE-2025-54757 affects PowerCMS. Unrestricted upload of files allows a product user-uploaded file to contain dangerous content, potentially enabling an arbitrary script when an administrator opens the malicious file in the browser. The root issue is unsafe handling of file uploads that can be man...