Reflected XSS in QuickCMS Admin Panel Functions by OpenSolution
CVE-2025-55175

5.1MEDIUM

Key Information:

Vendor

Opensolution

Status
Quickcms
Vendor
CVE Published:
28 August 2025

What is CVE-2025-55175?

QuickCMS contains a vulnerability that allows for Reflected XSS through the sLangEdit parameter in its admin panel. This security flaw permits an attacker to create a specifically crafted URL that, when accessed by the victim, executes arbitrary JavaScript in their browser. Although version 6.8 has been identified as vulnerable, other versions have not been tested and may also be susceptible to this exploit. OpenSolution has been informed about this security issue, but there has been no public disclosure regarding the affected versions.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

QuickCMS 6.8

References

https://cert.pl/posts/2025/08/CVE-2025-54540
third-party-advisory
https://opensolution.org
product

CVSS V4

Score:
5.1
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Karol Czubernat
JSON
.