# cve.now: Opensolution

The newest entries naming Opensolution as an affected vendor (up to 200), of 31 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-41875](https://cve.now/CVE-2026-41875.md): Cross-Site Request Forgery in admin panel of Quick.Cart (CVSS 6.9)
- [CVE-2026-33385](https://cve.now/CVE-2026-33385.md): Blind SQL Injection in Quick.CMS (CVSS 5.1)
- [CVE-2026-41874](https://cve.now/CVE-2026-41874.md): Hard-coded admin credentials in Quick.Cart (CVSS 6.8)
- [CVE-2026-63303](https://cve.now/CVE-2026-63303.md): Path Traversal in Quick.CMS (CVSS 5.1)
- [CVE-2026-63302](https://cve.now/CVE-2026-63302.md): Local File Inclusion in Quick.CMS (CVSS 5.1)
- [CVE-2026-63301](https://cve.now/CVE-2026-63301.md): Denial of Service in Quick.CMS (CVSS 7.0)
- [CVE-2026-11860](https://cve.now/CVE-2026-11860.md): Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS (CVSS 7.5)
- [CVE-2026-33386](https://cve.now/CVE-2026-33386.md): XSS in QuickCMS (CVSS 2.3)
- [CVE-2026-33384](https://cve.now/CVE-2026-33384.md): Session Fixation in QuickCMS (CVSS 4.8)
- [CVE-2021-47981](https://cve.now/CVE-2021-47981.md): Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form (CVSS 5.1)
- [CVE-2026-1468](https://cve.now/CVE-2026-1468.md): Cross-Site Request Forgery in QuickCMS (CVSS 5.1)
- [CVE-2026-23796](https://cve.now/CVE-2026-23796.md): Session Fixation in Quick.Cart (CVSS 4.8)
- [CVE-2026-23797](https://cve.now/CVE-2026-23797.md): Plaintext password display in Quick.Cart (CVSS 6.9)
- [CVE-2025-67684](https://cve.now/CVE-2025-67684.md): Remote Code Execution via Local File Inclusion in Quick.Cart (CVSS 9.4)
- [CVE-2025-67683](https://cve.now/CVE-2025-67683.md): Reflected XSS in Quick.Cart (CVSS 5.1)
- [CVE-2024-58308](https://cve.now/CVE-2024-58308.md): Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login (CVSS 9.3)
- [CVE-2025-12465](https://cve.now/CVE-2025-12465.md): Blind SQL Injection in QuickCMS (CVSS 8.6)
- [CVE-2025-10018](https://cve.now/CVE-2025-10018.md): Multiple Stored XSS in QuickCMS (CVSS 4.8)
- [CVE-2025-9982](https://cve.now/CVE-2025-9982.md): Hard-coded admin credentials in Quick.CMS (CVSS 6.9)
- [CVE-2025-10317](https://cve.now/CVE-2025-10317.md): Multiple Cross-Site Request Forgery in Quick.Cart (CVSS 5.1)
- [CVE-2025-9981](https://cve.now/CVE-2025-9981.md): Multiple Stored XSS in QuickCMS (CVSS 4.8)
- [CVE-2025-9980](https://cve.now/CVE-2025-9980.md): Multiple Stored XSS in QuickCMS (CVSS 4.8)
- [CVE-2025-55175](https://cve.now/CVE-2025-55175.md): Reflected XSS in QuickCMS (CVSS 5.1)
- [CVE-2025-54544](https://cve.now/CVE-2025-54544.md): Stored XSS in QuickCMS (CVSS 5.3)
- [CVE-2025-54543](https://cve.now/CVE-2025-54543.md): Stored XSS in QuickCMS (CVSS 5.3)
- [CVE-2025-54542](https://cve.now/CVE-2025-54542.md): Sending Password in GET Request (CVSS 6.9)
- [CVE-2025-54541](https://cve.now/CVE-2025-54541.md): Cross-Site Request Forgery in QuickCMS (CVSS 6.9)
- [CVE-2025-54540](https://cve.now/CVE-2025-54540.md): Reflected XSS in QuickCMS (CVSS 5.1)
- [CVE-2025-54175](https://cve.now/CVE-2025-54175.md): Reflected Cross-Site Scripting in QuickCMS.EXT (CVSS 4.6)
- [CVE-2025-54174](https://cve.now/CVE-2025-54174.md): Cross-Site Request Forgery in QuickCMS (CVSS 5.1)
- [CVE-2025-54172](https://cve.now/CVE-2025-54172.md): Stored Cross-Site Scripting in QuickCMS (CVSS 4.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/opensolution
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.