CVE-2025-54541mediumCWE-352

CVE-2025-54541: falha de média gravidade em OpenSolution QuickCMS

Cross-Site Request Forgery in QuickCMS

Publicada em

Seguir esta CVE+ Monitorar QuickCMS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.9epss 0.2%
QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which when visited by the admin, will automatically send a POST request deleting an article. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N
Produtos afetados
OpenSolution · QuickCMS
CVEs relacionadas — OpenSolution QuickCMS

No mesmo produto, das mais perigosas para as menos.

CVE-2025-55175MEDIUMReflected XSS in QuickCMSEPSS 0.3%CVE-2025-54540MEDIUMReflected XSS in QuickCMSEPSS 0.3%CVE-2025-12465HIGHBlind SQL Injection in QuickCMSEPSS 0.3%CVE-2025-9982MEDIUMHard-coded admin credentials in Quick.CMSEPSS 0.3%CVE-2026-1468MEDIUMCross-Site Request Forgery in QuickCMSEPSS 0.2%CVE-2025-54544MEDIUMStored XSS in QuickCMSEPSS 0.2%