QU
Product
Quick.Cart
11
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 2Medium 4Low 0
Watch
Add Quick.Cart to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-23796 | 9.8 | Feb 5 | Session Fixation in Quick.Cart Affected: 6.7 |
| CVE-2025-67684 | 7.2 | Jan 22 | Remote Code Execution via Local File Inclusion in Quick.Cart Affected: 6.7 |
| CVE-2020-35754 | 7.2 | Jan 28 | OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the… Affected: before 6.7 |
| CVE-2026-41875 | 6.9 | Sep 29 | Cross-Site Request Forgery in admin panel of Quick.Cart Affected: through 6.7.0 |
| CVE-2026-41874 | 6.8 | Jul 28 | Hard-coded admin credentials in Quick.Cart Affected: through 6.7 |
| CVE-2025-67683 | 6.1 | Jan 22 | Reflected XSS in Quick.Cart Affected: 6.7 |
| CVE-2026-23797 | 4.9 | Feb 5 | Plaintext password display in Quick.Cart Affected: 6.7 |
| CVE-2012-6430 | – | Mar 24 | Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject… Affected: 6.0 |
| CVE-2012-6049 | – | Nov 27 | Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a cookie, which reveals the installation… Affected: 5.0 |
| CVE-2009-4120 | – | Dec 1 | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete… Affected: 3.4 |
| CVE-2008-4140 | – | Sep 24 | Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string Affected: 3.1 |
Showing 11