CVE-2025-54752
Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malformed entry and a victim user downloads it as a CSV file and…
Published: 2025-07-31 · CVSS: 4.8 · CVSS 4.0
Multiple versions of PowerCMS improperly neutralize formula elements in a CSV file. If a product user creates a malformed entry and a victim user downloads it as a CSV file and opens it in the user's environment, the embedded code may be executed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7