OpenSolution · weakness class
Cross-site Scripting
21 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.
- Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbi…
- Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string.
- Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string.
- Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter.
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description paramete…
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description param…
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard paramete…
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component.
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in…
- Reflected XSS in QuickCMS
- Reflected XSS in QuickCMS
- Reflected XSS in Quick.Cart
- Reflected Cross-Site Scripting in QuickCMS.EXT
- Stored Cross-Site Scripting in QuickCMS
- Stored XSS in QuickCMS
- Stored XSS in QuickCMS
- Multiple Stored XSS in QuickCMS
- Multiple Stored XSS in QuickCMS
- Multiple Stored XSS in QuickCMS
- XSS in QuickCMS
- Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.