Vulnerabilidades en OpenSolution

30 resultados
Análisis Vexday

OpenSolution apresenta 23 vulnerabilidades registradas, com apenas 1 crítica, e nenhuma sob exploração ativa conhecida, reduzindo a urgência operacional imediata. A fraqueza dominante é XSS (CWE-79), típica de aplicações web, com 3 novos registros nos últimos 90 dias indicando ritmo moderado de descobertas. O risco permanece contido, mas exige vigilância contínua sobre as defesas contra injeção de código no lado do cliente.

CVE-2025-67684CRITICALRemote Code Execution via Local File Inclusion in Quick.CartEPSS 0.7%CVE-2024-58308CRITICALQuick.CMS 6.7 SQL Injection Authentication Bypass via Admin LoginEPSS 0.7%CVE-2026-63303MEDIUMPath Traversal in Quick.CMSEPSS 0.4%CVE-2026-63301HIGHDenial of Service in Quick.CMSEPSS 0.4%CVE-2026-63302MEDIUMLocal File Inclusion in Quick.CMSEPSS 0.3%CVE-2025-12465HIGHBlind SQL Injection in QuickCMSEPSS 0.3%CVE-2026-23796MEDIUMSession Fixation in Quick.CartEPSS 0.3%CVE-2025-9982MEDIUMHard-coded admin credentials in Quick.CMSEPSS 0.3%CVE-2025-55175MEDIUMReflected XSS in QuickCMSEPSS 0.3%CVE-2025-54540MEDIUMReflected XSS in QuickCMSEPSS 0.3%CVE-2025-67683MEDIUMReflected XSS in Quick.CartEPSS 0.3%CVE-2026-23797MEDIUMPlaintext password display in Quick.CartEPSS 0.2%CVE-2026-33385MEDIUMBlind SQL Injection in Quick.CMSEPSS 0.2%CVE-2026-11860HIGHInsecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMSEPSS 0.2%CVE-2025-54175MEDIUMReflected Cross-Site Scripting in QuickCMS.EXTEPSS 0.2%CVE-2026-1468MEDIUMCross-Site Request Forgery in QuickCMSEPSS 0.2%CVE-2025-10317MEDIUMMultiple Cross-Site Request Forgery in Quick.CartEPSS 0.2%CVE-2025-54544MEDIUMStored XSS in QuickCMSEPSS 0.2%CVE-2025-54543MEDIUMStored XSS in QuickCMSEPSS 0.2%CVE-2025-54172MEDIUMStored Cross-Site Scripting in QuickCMSEPSS 0.2%