QL
Product
qloapps
4
CVEs
0
On KEV
6.5
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 4Low 0
Watch
Add qloapps to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-116745 New | 6.5 | Oct 26 | QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation Affected: through 1.7.0 |
| CVE-2026-25861 | 5.9 | Jun 2 | QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php Affected: through 1.7.0; 64e9722e7e6a8fda77dd53964d988fb6b5c3d174 |
| CVE-2026-116746 New | 5.3 | Oct 26 | QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview Affected: 1.6.0 through 1.7.0 |
| CVE-2026-25558 | 4.8 | Jun 8 | QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager Affected: through 1.7.0 |
Showing 4