PowerCMS Unrestricted File Upload Vulnerability Allowing Arbitrary Script Execution

A vulnerability exists in PowerCMS versions through 6.7, 5.3, and 4.6, allowing users to upload files of dangerous types without restriction. If an administrator accesses a malicious file uploaded by a user, it could lead to the execution of arbitrary scripts in the administrator's browser.

Impact

Exploitation of this vulnerability could result in the execution of arbitrary scripts in the browser of an administrator who accesses the uploaded malicious file.

Remediation

Users are advised to update PowerCMS to the latest version. Instructions for updating can be found on the PowerCMS website.