CVE-2025-54752
Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malformed entry and a victim user downloads it as a CSV file and opens it in the user's environment, the embedded code may be executed.
| Software | From | Fixed in |
|---|---|---|
| alfasado / powercms | 4.0 | 4.61 |
| alfasado / powercms | 5.0 | 5.31 |
| alfasado / powercms | 6.0 | 6.71 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime