Vulnerability Database

300,830

Total vulnerabilities in the database

CVE-2019-6020

Open redirect vulnerability in PowerCMS 5.12 and earlier (PowerCMS 5.x), 4.42 and earlier (PowerCMS 4.x), and 3.293 and earlier (PowerCMS 3.x) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a specially crafted URL.

  • Published: Dec 26, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-6020
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:N

CWEs:

Software From Fixed in
alfasado / powercms 3.01 3.293.x
alfasado / powercms 4.0 4.42.x
alfasado / powercms 5.0 5.12.x