OpenSolution Quick.CMS vulnerabilities

21 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.

Latest OpenSolution Quick.CMS vulnerabilities

CVE-2026-33385 — Blind SQL Injection in Quick.CMS (CVSS 5.1)
CVE-2026-63303 — Path Traversal in Quick.CMS (CVSS 5.1)
CVE-2026-63302 — Local File Inclusion in Quick.CMS (CVSS 5.1)
CVE-2026-63301 — Denial of Service in Quick.CMS (CVSS 7.0)
CVE-2026-11860 — Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS (CVSS 7.5)
CVE-2021-47981 — Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form (CVSS 5.4)
CVE-2025-9982 — Hard-coded admin credentials in Quick.CMS (CVSS 7.5)
CVE-2025-10018 — Multiple Stored XSS in QuickCMS (CVSS 4.8)
CVE-2025-9981 — Multiple Stored XSS in QuickCMS (CVSS 4.8)
CVE-2025-9980 — Multiple Stored XSS in QuickCMS (CVSS 4.8)
CVE-2025-55175 — Reflected XSS in QuickCMS (CVSS 6.1)
CVE-2025-54544 — Stored XSS in QuickCMS (CVSS 4.8)
CVE-2025-54543 — Stored XSS in QuickCMS (CVSS 4.8)
CVE-2025-54542 — Sending Password in GET Request (CVSS 5.5)
CVE-2025-54541 — Cross-Site Request Forgery in QuickCMS (CVSS 4.3)
CVE-2025-54540 — Reflected XSS in QuickCMS (CVSS 6.1)
CVE-2025-54174 — Cross-Site Request Forgery in QuickCMS (CVSS 4.3)
CVE-2025-54172 — Stored Cross-Site Scripting in QuickCMS (CVSS 4.8)
CVE-2020-35754 — (CVSS 7.2)
CVE-2012-3833 — (CVSS 4.3)
CVE-2009-4121 — (CVSS 6.8)