Stored cross-site scripting vulnerability exists in multiple versions of PowerCMS. If a product user accesses a malicious page, an arbitrary script may be executed on the browser.
| Software | From | Fixed in |
|---|---|---|
| alfasado / powercms | 4.0 | 4.61 |
| alfasado / powercms | 5.0 | 5.31 |
| alfasado / powercms | 6.0 | 6.71 |