QL
Vendor
qloapps
4
CVEs
0
On KEV
2
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116746 New | QL qloapps qloapps | 5.3 | Oct 26 | QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview |
| CVE-2026-116745 New | QL qloapps qloapps | 6.5 | Oct 26 | QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation |
| CVE-2026-25558 | QL QloApps QloApps | 4.8 | Jun 8 | QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager |
| CVE-2026-25861 | QL QloApps QloApps | 5.9 | Jun 2 | QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php |