Medium
CVSS 5.4
Overview
A path traversal issue exists in file uploading feature of multiple versions of PowerCMS. Arbitrary files may be overwritten by a product user.
CVE-2025-41396
A path traversal issue exists in file uploading feature of multiple versions of ...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 5.4 (MEDIUM)
- Detected tags: path (tag impact: MODERATE)
Recommended actions:
- Canonicalize path; block `..` traversal; use allowlists.