Skip to content

OpenSolution · weakness class

Cross-site Scripting

21 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

  1. Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbi…CVE-2012-6430Opensolution · 3.9% likely

    CWE-79

  2. Cross-site scripting (XSS) vulnerability in admin.php in OpenSolution Quick.Cms.Lite 2.1 allows remote attackers to inject arbitrary web script or HTML via the query string.CVE-2008-4139Opensolution · 1.5% likely

    CWE-79

  3. Cross-site scripting (XSS) vulnerability in admin.php in Quick.Cart 3.1 allows remote attackers to inject arbitrary web script or HTML via the query string.CVE-2008-4140Opensolution · 1.5% likely

    CWE-79

  4. Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter.CVE-2012-3833Opensolution · 1.2% likely

    CWE-79

  5. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description paramete…CVE-2023-43343Opensolution · CVSS 5.4 · 0.7% likely

    CWE-79

  6. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description param…CVE-2023-43344Opensolution · CVSS 5.4 · 0.7% likely

    CWE-79

  7. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard paramete…CVE-2023-43346Opensolution · 0.5% likely

    CWE-79

  8. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component.CVE-2023-43342Opensolution · CVSS 5.4 · 0.5% likely

    CWE-79

  9. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in…CVE-2023-43345Opensolution · 0.4% likely

    CWE-79

  10. Reflected XSS in QuickCMSCVE-2025-55175OpenSolution · CVSS 5.1 · 0.3% likely

    CWE-79

  11. Reflected XSS in QuickCMSCVE-2025-54540OpenSolution · CVSS 5.1 · 0.3% likely

    CWE-79

  12. Reflected XSS in Quick.CartCVE-2025-67683OpenSolution · CVSS 5.1 · 0.3% likely

    CWE-79

  13. Reflected Cross-Site Scripting in QuickCMS.EXTCVE-2025-54175OpenSolution · CVSS 4.6 · 0.2% likely

    CWE-79

  14. Stored Cross-Site Scripting in QuickCMSCVE-2025-54172OpenSolution · CVSS 4.8 · 0.2% likely

    CWE-79

  15. Stored XSS in QuickCMSCVE-2025-54544OpenSolution · CVSS 5.3 · 0.2% likely

    CWE-79

  16. Stored XSS in QuickCMSCVE-2025-54543OpenSolution · CVSS 5.3 · 0.2% likely

    CWE-79

  17. Multiple Stored XSS in QuickCMSCVE-2025-9981OpenSolution · CVSS 4.8 · 0.2% likely

    CWE-79

  18. Multiple Stored XSS in QuickCMSCVE-2025-9980OpenSolution · CVSS 4.8 · 0.2% likely

    CWE-79

  19. Multiple Stored XSS in QuickCMSCVE-2025-10018OpenSolution · CVSS 4.8 · 0.2% likely

    CWE-79

  20. XSS in QuickCMSCVE-2026-33386OpenSolution · CVSS 2.3 · 0.2% likely

    CWE-79

  21. Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders FormCVE-2021-47981Opensolution · CVSS 5.4 · 0.2% likely

    CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.