OpenSolution / Quick.CMS
15 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-33385 | Blind SQL Injection in Quick.CMS | MEDIUM | 5.1 | Jul 29, 2026 |
| CVE-2026-63303 | Path Traversal in Quick.CMS | MEDIUM | 5.1 | Jul 28, 2026 |
| CVE-2026-63302 | Local File Inclusion in Quick.CMS | MEDIUM | 5.1 | Jul 28, 2026 |
| CVE-2026-63301 | Denial of Service in Quick.CMS | HIGH | 7.0 | Jul 28, 2026 |
| CVE-2026-11860 | Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS | HIGH | 7.5 | Jun 15, 2026 |
| CVE-2021-47981 | Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form | MEDIUM | 5.1 | May 16, 2026 |
| CVE-2024-58308 | Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login | CRITICAL | 9.3 | Dec 11, 2025 |
| CVE-2025-10018 | Multiple Stored XSS in QuickCMS | MEDIUM | 4.8 | Nov 14, 2025 |
| CVE-2025-9982 | Hard-coded admin credentials in Quick.CMS | MEDIUM | 6.9 | Nov 14, 2025 |
| CVE-2025-9981 | Multiple Stored XSS in QuickCMS | MEDIUM | 4.8 | Oct 23, 2025 |
| CVE-2025-9980 | Multiple Stored XSS in QuickCMS | MEDIUM | 4.8 | Oct 23, 2025 |
| CVE-2025-55175 | Reflected XSS in QuickCMS | MEDIUM | 5.1 | Aug 28, 2025 |
| CVE-2025-54544 | Stored XSS in QuickCMS | MEDIUM | 5.3 | Aug 28, 2025 |
| CVE-2025-54543 | Stored XSS in QuickCMS | MEDIUM | 5.3 | Aug 28, 2025 |
| CVE-2025-54542 | Sending Password in GET Request | MEDIUM | 6.9 | Aug 28, 2025 |
| CVE-2025-54541 | Cross-Site Request Forgery in QuickCMS | MEDIUM | 6.9 | Aug 28, 2025 |
| CVE-2025-54540 | Reflected XSS in QuickCMS | MEDIUM | 5.1 | Aug 28, 2025 |
| CVE-2025-54174 | Cross-Site Request Forgery in QuickCMS | MEDIUM | 5.1 | Aug 20, 2025 |
| CVE-2025-54172 | Stored Cross-Site Scripting in QuickCMS | MEDIUM | 4.8 | Aug 20, 2025 |
| CVE-2020-35754 | OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input… | HIGH | 7.2 | Jan 28, 2021 |
| CVE-2012-3833 | Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML vi… | MEDIUM | 4.3 | Jul 3, 2012 |
| CVE-2009-4121 | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the a… | MEDIUM | 6.8 | Dec 1, 2009 |
Showing 1 to 15 of 15 CVEs