Search Results (47 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2012-3833 1 Opensolution 1 Quick.cms 2025-04-11 N/A
Cross-site scripting (XSS) vulnerability in the default index page in admin/ in Quick.CMS 4.0 allows remote attackers to inject arbitrary web script or HTML via the p parameter.
CVE-2023-43346 1 Opensolution 1 Quick Cms 2024-11-21 5.4 Medium
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Backend - Dashboard parameter in the Languages Menu component.
CVE-2023-43345 1 Opensolution 1 Quick Cms 2024-11-21 8.6 High
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Content - Name parameter in the Pages Menu component.
CVE-2023-43344 1 Opensolution 1 Quick Cms 2024-11-21 5.4 Medium
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the SEO - Meta description parameter in the Pages Menu component.
CVE-2023-43343 1 Opensolution 1 Quick Cms 2024-11-21 5.4 Medium
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Files - Description parameter in the Pages Menu component.
CVE-2023-43342 1 Opensolution 1 Quick Cms 2024-11-21 5.4 Medium
Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted script to the Languages Menu component.
CVE-2020-35754 1 Opensolution 2 Quick.cart, Quick.cms 2024-11-21 7.2 High
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Language tab.