QU
Product
Quick.CMS
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 19Low 0
Watch
Add Quick.CMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-58308 | 9.8 | Dec 11 | Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login Affected: 6.7 |
| CVE-2023-43345 | 8.6 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in… Affected: 6.7 |
| CVE-2026-11860 | 7.5 | Jun 15 | Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS Affected: through 6.8 |
| CVE-2025-9982 | 7.5 | Nov 14 | Hard-coded admin credentials in Quick.CMS Affected: 6.8 |
| CVE-2020-35754 | 7.2 | Jan 28 | OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the… Affected: before 6.7 |
| CVE-2026-63301 | 7.0 | Jul 28 | Denial of Service in Quick.CMS Affected: through 6.8.0 |
| CVE-2025-55175 | 6.1 | Aug 28 | QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality Affected: 6.8 |
| CVE-2025-54540 | 6.1 | Aug 28 | QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality Affected: 6.8 |
| CVE-2025-54542 | 5.5 | Aug 28 | QuickCMS sends password and login via GET Request Affected: 6.8 |
| CVE-2021-47981 | 5.4 | May 16 | Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form Affected: 6.7 |
| CVE-2023-43346 | 5.4 | Oct 20 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard… Affected: 6.7 |
| CVE-2023-43344 | 5.4 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description… Affected: 6.7 |
| CVE-2023-43342 | 5.4 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component Affected: 6.7 |
| CVE-2023-43343 | 5.4 | Oct 5 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description… Affected: 6.7 |
| CVE-2026-33385 | 5.1 | Jul 29 | Blind SQL Injection in Quick.CMS Affected: 6.8 |
| CVE-2026-63303 | 5.1 | Jul 28 | Path Traversal in Quick.CMS Affected: through 6.8.0 |
| CVE-2026-63302 | 5.1 | Jul 28 | Local File Inclusion in Quick.CMS Affected: through 6.8.0 |
| CVE-2025-10018 | 4.8 | Nov 14 | Multiple Stored XSS in QuickCMS Affected: 6.8 |
| CVE-2025-9981 | 4.8 | Oct 23 | QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality (sliders-form) Affected: 6.8 |
| CVE-2025-9980 | 4.8 | Oct 23 | QuickCMS is vulnerable to multiple Stored XSS in page editor functionality (pages-form) Affected: 6.8 |
| CVE-2025-54544 | 4.8 | Aug 28 | QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality Affected: 6.8 |
| CVE-2025-54543 | 4.8 | Aug 28 | QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality Affected: 6.8 |
| CVE-2025-54172 | 4.8 | Aug 20 | QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality Affected: 6.8 |
| CVE-2025-54541 | 4.3 | Aug 28 | QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality Affected: 6.8 |
| CVE-2025-54174 | 4.3 | Aug 20 | QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality Affected: 6.8 |
| CVE-2012-6430 | – | Mar 24 | Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject… Affected: 5.0 |
| CVE-2012-3833 | – | Jul 3 | Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter Affected: 4.0 |
| CVE-2009-4121 | – | Dec 1 | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for… Affected: 2.4 |
Showing 28