https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 05:48:06 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-251240 EUVD-2026-251240 https://cve.radiocsirt.org/vuln/euvd-2026-251240 https://cve.radiocsirt.org/vuln/fkie_cve-2025-54540 <p>QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin&#39;s panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim&#39;s browser.</p> <p>The vendor was notified early about this vulnerability, but didn&#39;t respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.</p> <p>QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin&#39;s panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim&#39;s browser.</p> <p>The vendor was notified early about this vulnerability, but didn&#39;t respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-54540 https://cve.radiocsirt.org/vuln/ghsa-h6m8-w6h5-f84w <p>QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin&#39;s panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim&#39;s browser.</p> <p>The vendor was notified early about this vulnerability, but didn&#39;t respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.</p> <p>QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin&#39;s panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim&#39;s browser.</p> <p>The vendor was notified early about this vulnerability, but didn&#39;t respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.</p> https://cve.radiocsirt.org/vuln/ghsa-h6m8-w6h5-f84w