Stored XSS Vulnerability in QuickCMS by OpenSolution

CVE-2025-54172

What is CVE-2025-54172?

QuickCMS is susceptible to a Stored Cross-Site Scripting (XSS) vulnerability through the sTitle parameter in its page editor functionality. This allows a malicious attacker with admin privileges to inject arbitrary HTML and JavaScript into the website. When users visit the edited page, the injected code executes, potentially compromising user data and site integrity. While only version 6.8 was confirmed as vulnerable, other versions have not been tested and may also be impacted. Despite notification to the vendor regarding this issue, no response was provided regarding the vulnerability's specifics or a broader range of affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References