Description
PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Alfasado Inc. | PowerCMS (PowerCMS 6 Series) | affected |
|
||||||
| Alfasado Inc. | PowerCMS (PowerCMS 5 Series) | affected |
|
||||||
| Alfasado Inc. | PowerCMS (PowerCMS 4 Series) | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
No advisories yet.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: jpcert
Published:
Updated: 2024-08-02T21:46:29.150Z
Reserved: 2023-12-21T12:24:04.679Z
Link: CVE-2023-49117
Vulnrichment
No data.
NVD
Status : Modified
Published: 2023-12-26T06:15:07.260
Modified: 2024-11-21T08:32:52.093
Link: CVE-2023-49117
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses