Open redirect vulnerability in PowerCMS (6 Series, 5...
Moderate severity
Unreviewed
Published
Dec 26, 2023
to the GitHub Advisory Database
•
Updated Jan 13, 2024
Description
Published by the National Vulnerability Database
Dec 26, 2023
Published to the GitHub Advisory Database
Dec 26, 2023
Last updated
Jan 13, 2024
Open redirect vulnerability in PowerCMS (6 Series, 5 Series, and 4 Series) allows a remote unauthenticated attacker to redirect users to arbitrary web sites via a specially crafted URL. Note that all versions of PowerCMS 3 Series and earlier which are unsupported (End-of-Life, EOL) are also affected by this vulnerability.
References