https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T16:45:06.867324+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-248807 EUVD-2026-248807 2026-10-10T16:45:06.870121+00:00 EUVD-2026-248807 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54757 fkie_cve-2025-54757 2026-10-10T16:45:06.870154+00:00

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a product user, an arbitrary script may be executed on the browser.

 https://cve.radiocsirt.org/vuln/ghsa-whwv-236h-fxh5 GHSA-whwv-236h-fxh5 2026-10-10T16:45:06.870199+00:00

Multiple versions of PowerCMS allow unrestricted upload of dangerous files. If a product administrator accesses a malicious file uploaded by a product user, an arbitrary script may be executed on the browser.

 https://cve.radiocsirt.org/vuln/jvndb-2025-010408 jvndb-2025-010408 2026-10-10T16:45:06.870239+00:00

PowerCMS provided by Alfasado Inc. contains multiple vulnerabilities listed below. * Reflected cross-site scripting (CWE-79) - CVE-2025-36563 * Stored cross-site scripting (CWE-79) - CVE-2025-41391 * Path traversal in file uploading (CWE-22) - CVE-2025-41396 * Path traversal in backup restore (CWE-22) - CVE-2025-46359 * Improper neutralization of formula elements in a CSV file (CWE-1236) - CVE-2025-54752 * Unrestricted upload of file with dangerous type (CWE-434) - CVE-2025-54757 The following people of VCSLab - Viettel Cyber Security reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the developer. thanhtt74 (Tran Thi Thanh) namdi (Do Ich Nam) quanlna2 (Le Nguyen Anh Quan)