OP
Vendor
opensolution
49
CVEs
0
On KEV
1
New 30D
Products
QU9.8
Quick.Cart
OpenSolution
11 CVEs0 on KEV1 new
QU9.8
Quick.CMS
opensolution
28 CVEs0 on KEV0 new
QU–
Quick.cms.lite
Opensolution
4 CVEs0 on KEV0 new
QU8.6
QuickCMS
OpenSolution
4 CVEs0 on KEV0 new
QU–
Quick.car
Opensolution
1 CVEs0 on KEV0 new
QU6.1
Quick.cms.ext
Opensolution
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-41875 | QU Quick.Cart OpenSolution | 6.9 | Sep 29 | Cross-Site Request Forgery in admin panel of Quick.Cart |
| CVE-2026-33385 | QU Quick.CMS OpenSolution | 5.1 | Jul 29 | Blind SQL Injection in Quick.CMS |
| CVE-2026-41874 | QU Quick.Cart OpenSolution | 6.8 | Jul 28 | Hard-coded admin credentials in Quick.Cart |
| CVE-2026-63303 | QU Quick.CMS OpenSolution | 5.1 | Jul 28 | Path Traversal in Quick.CMS |
| CVE-2026-63302 | QU Quick.CMS OpenSolution | 5.1 | Jul 28 | Local File Inclusion in Quick.CMS |
| CVE-2026-63301 | QU Quick.CMS OpenSolution | 7.0 | Jul 28 | Denial of Service in Quick.CMS |
| CVE-2026-11860 | QU Quick.CMS OpenSolution | 7.5 | Jun 15 | Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS |
| CVE-2026-33386 | QU QuickCMS OpenSolution | 2.3 | May 29 | XSS in QuickCMS |
| CVE-2026-33384 | QU QuickCMS OpenSolution | 4.8 | May 29 | Session Fixation in QuickCMS |
| CVE-2021-47981 | QU Quick.CMS Opensolution | 5.4 | May 16 | Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form |
| CVE-2026-1468 | QU QuickCMS OpenSolution | 5.1 | Mar 6 | Cross-Site Request Forgery in QuickCMS |
| CVE-2026-23796 | QU Quick.Cart OpenSolution | 9.8 | Feb 5 | Session Fixation in Quick.Cart |
| CVE-2026-23797 | QU Quick.Cart OpenSolution | 4.9 | Feb 5 | Plaintext password display in Quick.Cart |
| CVE-2025-67684 | QU Quick.Cart OpenSolution | 7.2 | Jan 22 | Remote Code Execution via Local File Inclusion in Quick.Cart |
| CVE-2025-67683 | QU Quick.Cart OpenSolution | 6.1 | Jan 22 | Reflected XSS in Quick.Cart |
| CVE-2024-58308 | QU Quick.CMS opensolution | 9.8 | Dec 11 | Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login |
| CVE-2025-12465 | QU QuickCMS OpenSolution | 8.6 | Dec 2 | Blind SQL Injection in QuickCMS |
| CVE-2025-9982 | QU Quick.cms Opensolution | 7.5 | Nov 14 | A vulnerability exists in QuickCMS version 6.8 where sensitive admin credentials are hardcoded in a configuration file and stored in plaintext |
| CVE-2025-10018 | QU Quick.cms Opensolution | 4.8 | Nov 14 | QuickCMS is vulnerable to multiple Stored XSS in language editor functionality (languages) |
| CVE-2025-9981 | QU Quick.cms Opensolution | 4.8 | Oct 23 | QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality (sliders-form) |
| CVE-2025-9980 | QU Quick.cms Opensolution | 4.8 | Oct 23 | QuickCMS is vulnerable to multiple Stored XSS in page editor functionality (pages-form) |
| CVE-2025-55175 | QU Quick.cms Opensolution | 6.1 | Aug 28 | QuickCMS is vulnerable to Reflected XSS via sLangEdit parameter in admin's panel functionality |
| CVE-2025-54544 | QU Quick.cms Opensolution | 4.8 | Aug 28 | QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality |
| CVE-2025-54543 | QU Quick.cms Opensolution | 4.8 | Aug 28 | QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality |
| CVE-2025-54542 | QU Quick.cms Opensolution | 5.5 | Aug 28 | QuickCMS sends password and login via GET Request |
| CVE-2025-54541 | QU Quick.cms Opensolution | 4.3 | Aug 28 | QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality |
| CVE-2025-54540 | QU Quick.cms Opensolution | 6.1 | Aug 28 | QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality |
| CVE-2025-54175 | QU Quick.cms.ext Opensolution | 6.1 | Aug 20 | QuickCMS.EXT is vulnerable to Reflected XSS in sFileName parameter in thumbnail viewer functionality |
| CVE-2025-54174 | QU Quick.cms Opensolution | 4.3 | Aug 20 | QuickCMS is vulnerable to Cross-Site Request Forgery in article creation functionality |
| CVE-2025-54172 | QU Quick.cms Opensolution | 4.8 | Aug 20 | QuickCMS is vulnerable to Stored XSS in sTitle parameter in page editor functionality |
| CVE-2023-43346 | QC Quick Cms Opensolution | 5.4 | Oct 20 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard… |
| CVE-2023-43345 | QC Quick Cms Opensolution | 8.6 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in… |
| CVE-2023-43344 | QC Quick Cms Opensolution | 5.4 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description… |
| CVE-2023-43342 | QC Quick Cms Opensolution | 5.4 | Oct 19 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component |
| CVE-2023-43343 | QC Quick Cms Opensolution | 5.4 | Oct 5 | Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description… |
| CVE-2020-35754 | QU Quick.cart Opensolution | 7.2 | Jan 28 | OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the… |
| CVE-2012-6430 | QU Quick.cart Opensolution | – | Mar 24 | Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject… |
| CVE-2012-6049 | QU Quick.cart Opensolution | – | Nov 27 | Open Solution Quick.Cart 5.0 allows remote attackers to obtain sensitive information via (1) a long string or (2) invalid characters in a cookie, which reveals the installation… |
| CVE-2012-3833 | QU Quick.cms Opensolution | – | Jul 3 | Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter |
| CVE-2009-4121 | QU Quick.cms Opensolution | – | Dec 1 | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.CMS 2.4 and Quick.CMS.Lite 2.4 allow remote attackers to hijack the authentication of the administrator for… |
| CVE-2009-4120 | QU Quick.cart Opensolution | – | Dec 1 | Multiple cross-site request forgery (CSRF) vulnerabilities in Quick.Cart 3.4 allow remote attackers to hijack the authentication of the administrator for requests that (1) delete… |
| CVE-2009-1410 | QU Quick.cms.lite Opensolution | – | Apr 24 | SQL injection vulnerability in index.php in Quick.Cms.Lite 0.5 allows remote attackers to execute arbitrary SQL commands via the id parameter |
| CVE-2008-4140 | QU Quick.cart Opensolution | – | Sep 24 | Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string |
| CVE-2008-4139 | QU Quick.cms.lite Opensolution | – | Sep 24 | Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string |
| CVE-2007-0258 | QU Quick.car Opensolution | – | Jan 16 | Cross-site scripting (XSS) vulnerability in index.php in (1) Fastilo 2.0 and (2) Open Solution Quick.Cart 2.0 allows remote attackers to inject arbitrary web script or HTML via… |
| CVE-2006-5834 | QU Quick.cms.lite Opensolution | – | Nov 10 | Directory traversal vulnerability in general.php in OpenSolution Quick.Cms.Lite 0.3 allows remote attackers to include arbitrary files via a |
