https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:05:46.073612+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-251239 EUVD-2026-251239 2026-10-02T12:05:46.135102+00:00 EUVD-2026-251239 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54541 fkie_cve-2025-54541 2026-10-02T12:05:46.135137+00:00

QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request deleting an article.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

 https://cve.radiocsirt.org/vuln/ghsa-7jrp-8f7v-p43h GHSA-7jrp-8f7v-p43h 2026-10-02T12:05:46.135178+00:00

QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request deleting an article.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.