OpenSolution · product
Quick.cms
15 CVEs
Every dot is a CVE in what this vendor ships; the named ones are the most at risk.
Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.
- Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter.
- Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description paramete…
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description param…
- Denial of Service in Quick.CMS
- Path Traversal in Quick.CMS
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard paramete…
- Local File Inclusion in Quick.CMS
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component.
- Blind SQL Injection in Quick.CMS
- Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in…
- Stored Cross-Site Scripting in QuickCMS
- Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS
- Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form
- Cross-Site Request Forgery in QuickCMS
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP