Qexo vulnerabilities
We track 1 vulnerability in Qexo products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest Qexo vulnerabilities
- 9.3 Critical severity
Qexo: Insertion of Sensitive Information into Externally-Accessible File or Directory
Qexo is an open source online editor for static blogs. From 4.0.0 until 4.2.0, Qexo exposes /api/init_step/ through init_step_api without authentication, authorization, or a setup-completion guard. An unauthenticated requester with a valid CSRF token obtained