CNNVD-202511-1758 Information

CNNVD ID

CNNVD-202511-1758

CVE-2025-10018

  • CNNVD Published: 2025-11-14

Description (Chinese)

QuickCMS是QuickCMS开源的一款内容管理系统。 QuickCMS 6.8版本存在跨站脚本漏洞,该漏洞源于语言编辑器功能中存在存储型跨站脚本,可能导致任意HTML和JS注入。

Description (English)

QuickCMS is an open-source QuickCMS content management system. QuickCMS version 6.8 has a cross-site script loophole, which stems from the presence of stored cross-site scripts in the language editor function, which may result in any type of HTML and JS injection.

Hazard Level

High

Vulnerability Type

跨站脚本

Affected Vendor

QuickCMS

Published

2025-11-14

Last Modified

2026-02-24

References

https://cert.pl/posts/2025/11/CVE-2025-9982 https://opensolution.org/cms-system-quick-cms.html

Share on: