CVE-2025-29993

The affected versions of PowerCMS allow HTTP header injection. This vulnerability can be leveraged to direct the affected product to send email with a tampered URL, such as password reset mail...

PT-2025-13048

Name of the Vulnerable Software and Affected Versions PowerCMS affected versions not specified Description The issue allows for HTTP header injection, which can be used to send email with a tampered URL, such as password reset mail, by directing the affected product to do so. Recommendations At t...

CVE-2025-29993: Improper Neutralization of Special Elements in Output Used by a Downstream Component

The affected versions of PowerCMS allow HTTP header injection. This vulnerability can be leveraged to direct the affected product to send email with a tampered URL, such as password reset mail...