← Back

Quick Cms

quick_cms

Vendor: Opensolution • 7 CVEs

CVEs (7)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-58308
1Opensolution
1Quick Cms
Dec 31, 2025
Dec 11, 2025
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gai...Show more
Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to the system.Show less
CVE-2023-43346
1Opensolution
1Quick Cms
Nov 21, 2024
Oct 20, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component.
CVE-2023-43345
1Opensolution
1Quick Cms
Nov 21, 2024
Oct 19, 2023
N/A· v4
8.6 HIGH· v3
N/A· v2
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component.
CVE-2023-43344
1Opensolution
1Quick Cms
Nov 21, 2024
Oct 19, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component.
CVE-2023-43342
1Opensolution
1Quick Cms
Nov 21, 2024
Oct 19, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component.
CVE-2023-43343
1Opensolution
1Quick Cms
Nov 21, 2024
Oct 5, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component.
CVE-2012-6430
1Opensolution
3Quick.cart
Quick CartQuick Cms
May 6, 2026
Mar 24, 2014
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INF...Show more
Cross-site scripting (XSS) vulnerability in Open Solution Quick.Cms 5.0 and Quick.Cart 6.0, possibly as downloaded before December 19, 2012, allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO to admin.php. NOTE: this might be a duplicate of CVE-2008-4140.Show less