QU
Product
Quick.CMS
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 19Low 0
Watch
Add Quick.CMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43345 | 8.6 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in… Affected: 6.7 |
| CVE-2026-11860 | 7.5 | Jun 15 | Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS Affected: through 6.8 |
| CVE-2025-9982 | 7.5 | Nov 14 | Hard-coded admin credentials in Quick.CMS Affected: 6.8 |
| CVE-2020-35754 | 7.2 | Jan 28 | OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the… Affected: before 6.7 |
| CVE-2026-63301 | 7.0 | Jul 28 | Denial of Service in Quick.CMS Affected: through 6.8.0 |
Showing 5
