Q2a vulnerabilities
We track 1 vulnerability in Q2a products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 22, 2026.
1vulnerabilities
0critical
1high
0exploited
7.4average CVSS score
Latest Q2a vulnerabilities
- 7.4 High severity
Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows…
Question2Answer through 1.8.8 contains a session invalidation vulnerability that allows attackers with a previously obtained remember-me cookie to retain authenticated access by exploiting the forgot-password reset flow's failure to clear the sessioncode field