Exposed Credentials via GET Requests in QuickCMS

CVE-2025-54542

What is CVE-2025-54542?

The QuickCMS product from OpenSolution is susceptible to a serious vulnerability where login credentials are transmitted via GET requests. This design flaw permits a local attacker to leverage access to the victim's browser history, enabling them to retrieve sensitive user information. Although the vendor received notification regarding this issue, they have not provided adequate details about the vulnerability's existence or a comprehensive list of affected versions beyond the confirmed vulnerability in version 6.8. Other untested versions may also be vulnerable, prompting users to exercise caution.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References