Read the docs

OpenSolution

Records47All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

OpenSolution records in CISA KEV

No OpenSolution vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Quick.cms 15 records MEDIUM Quick.cart 9 records MEDIUM Quick Cms 7 records HIGH Quick.cms.lite 4 records LOW Quick.car 1 record LOW Quick.cms.ext 1 record LOW

Records

7 records in Quick Cms · all components

TI-2024-38405 CVE-2024-58308 · GHSA-xrmh-cph2-4343

Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login

Priority HIGH 81

Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00666 Published 2025-12-11 No fix listed CWE-89
TI-2023-23206 CVE-2023-43346 · GHSA-wj86-wmr8-wpx4

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local…

Priority MEDIUM 58

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00529 Published 2023-10-20 No fix listed CWE-79
TI-2023-23204 CVE-2023-43344 · GHSA-77wr-jhhf-58xr

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local…

Priority MEDIUM 58

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00655 Published 2023-10-19 No fix listed CWE-79
Open these records in search →