Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: OpenSolution Component: Quick Cms Clear all filters
TI-2024-38405 CVE-2024-58308 · GHSA-xrmh-cph2-4343

Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login

Priority HIGH 81

Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00666 Published 2025-12-11 No fix listed CWE-89
TI-2023-23206 CVE-2023-43346 · GHSA-wj86-wmr8-wpx4

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local…

Priority MEDIUM 58

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00529 Published 2023-10-20 No fix listed CWE-79
TI-2023-23204 CVE-2023-43344 · GHSA-77wr-jhhf-58xr

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local…

Priority MEDIUM 58

Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00655 Published 2023-10-19 No fix listed CWE-79