Skip to content

OpenSolution · product

Quick.cms

15 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

  1. Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter.CVE-2012-3833Opensolution · 1.2% likely

    CWE-79

  2. Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin LoginCVE-2024-58308opensolution · CVSS 9.3 · 0.7% likely

    CWE-89

  3. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description paramete…CVE-2023-43343Opensolution · CVSS 5.4 · 0.7% likely

    CWE-79

  4. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description param…CVE-2023-43344Opensolution · CVSS 5.4 · 0.7% likely

    CWE-79

  5. Denial of Service in Quick.CMSCVE-2026-63301OpenSolution · CVSS 7 · 0.6% likely

    CWE-602

  6. Path Traversal in Quick.CMSCVE-2026-63303OpenSolution · CVSS 5.1 · 0.6% likely

    CWE-23

  7. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard paramete…CVE-2023-43346Opensolution · 0.5% likely

    CWE-79

  8. Local File Inclusion in Quick.CMSCVE-2026-63302OpenSolution · CVSS 5.1 · 0.5% likely

    CWE-98

  9. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component.CVE-2023-43342Opensolution · CVSS 5.4 · 0.5% likely

    CWE-79

  10. Blind SQL Injection in Quick.CMSCVE-2026-33385OpenSolution · CVSS 5.1 · 0.4% likely

    CWE-89

  11. Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in…CVE-2023-43345Opensolution · 0.4% likely

    CWE-79

  12. Stored Cross-Site Scripting in QuickCMSCVE-2025-54172OpenSolution · CVSS 4.8 · 0.2% likely

    CWE-79

  13. Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMSCVE-2026-11860OpenSolution · CVSS 7.5 · 0.2% likely

    CWE-502

  14. Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders FormCVE-2021-47981Opensolution · CVSS 5.4 · 0.2% likely

    CWE-79

  15. Cross-Site Request Forgery in QuickCMSCVE-2025-54174OpenSolution · CVSS 5.1 · 0.2% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

Updated AboutDevelopersSign in