CNNVD-202508-2263 Information

CNNVD ID

CNNVD-202508-2263

CVE-2025-54175

  • CNNVD Published: 2025-08-20

Description (Chinese)

Open Solution QuickCMS是Open Solution开源的一个内容管理系统。 Open Solution QuickCMS 6.8版本存在跨站脚本漏洞,该漏洞源于对sFileName参数输入中和不当,可能导致反射型跨站脚本攻击。

Description (English)

Open solution QuickCMS is a content management system for Open Solution. Open solution QuickCMS version 6.8 has a cross-site script loophole, which stems from the misdirection of sFileName parameters and may lead to a reflective cross-script attack.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

Open Solution

Published

2025-08-20

Last Modified

2026-02-24

References

https://opensolution.org/professional-cms-system-quick-cms-ext.html https://cert.pl/posts/2025/08/CVE-2025-54172 https://nvd.nist.gov/vuln/detail/CVE-2025-54175

Share on: