QU
Product
Quick.CMS
28
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 19Low 0
Watch
Add Quick.CMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-55175 | 6.1 | Aug 28 | QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality Affected: 6.8 |
| CVE-2025-54540 | 6.1 | Aug 28 | QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality Affected: 6.8 |
| CVE-2025-54542 | 5.5 | Aug 28 | QuickCMS sends password and login via GET Request Affected: 6.8 |
| CVE-2021-47981 | 5.4 | May 16 | Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form Affected: 6.7 |
| CVE-2023-43346 | 5.4 | Oct 20 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard… Affected: 6.7 |
| CVE-2023-43344 | 5.4 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description… Affected: 6.7 |
| CVE-2023-43342 | 5.4 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component Affected: 6.7 |
| CVE-2023-43343 | 5.4 | Oct 5 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description… Affected: 6.7 |
| CVE-2026-33385 | 5.1 | Jul 29 | Blind SQL Injection in Quick.CMS Affected: 6.8 |
| CVE-2026-63303 | 5.1 | Jul 28 | Path Traversal in Quick.CMS Affected: through 6.8.0 |
| CVE-2026-63302 | 5.1 | Jul 28 | Local File Inclusion in Quick.CMS Affected: through 6.8.0 |
| CVE-2025-10018 | 4.8 | Nov 14 | Multiple Stored XSS in QuickCMS Affected: 6.8 |
| CVE-2025-9981 | 4.8 | Oct 23 | QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality (sliders-form) Affected: 6.8 |
| CVE-2025-9980 | 4.8 | Oct 23 | QuickCMS is vulnerable to multiple Stored XSS in page editor functionality (pages-form) Affected: 6.8 |
| CVE-2025-54544 | 4.8 | Aug 28 | QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality Affected: 6.8 |
| CVE-2025-54543 | 4.8 | Aug 28 | QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality Affected: 6.8 |
| CVE-2025-54172 | 4.8 | Aug 20 | QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality Affected: 6.8 |
| CVE-2025-54541 | 4.3 | Aug 28 | QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality Affected: 6.8 |
| CVE-2025-54174 | 4.3 | Aug 20 | QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality Affected: 6.8 |
Showing 19
