CVE-2023-49117

PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability

published December 26, 2023

CVSS
—
EPSS
0%
Percentile
21.3
In the wild
Unconfirmed
What it is

PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability. If this vulnerability is exploited, an arbitrary script may be executed on a logged-in user's web browser. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00298 · 21.3th percentile
Published
2023-12-26T05:53Z
EPSS history
Timeline
  • 26 DEC 05:53Z
    PowerCMS (6 Series, 5 Series, and 4 Series) contains a stored cross-site scripting vulnerability
    cvelistv5