QuickCMS vulnerabilities

2 known vulnerabilities in QuickCMS from OpenSolution. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  QuickCMS: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-12465Dec 2, 2025OpenSolution

  A Blind SQL injection vulnerability has been identified in QuickCMS. Improper neutralization of input provided by a high-privileged user into aFilesDelete allows for Blind SQL Injection attacks. The vendor was notified early about this vulnerability, but didn'

• 7.5 High severity

  QuickCMS: Plaintext Storage of a Password

  CVE-2025-9982Nov 14, 2025OpenSolution

  A vulnerability exists in QuickCMS version 6.8 where sensitive admin credentials are hardcoded in a configuration file and stored in plaintext. This flaw allows attackers with access to the source code or the server file system to retrieve authentication detai