Reflected XSS in QuickCMS Admin Panel Functions by OpenSolution

CVE-2025-55175

What is CVE-2025-55175?

QuickCMS contains a vulnerability that allows for Reflected XSS through the sLangEdit parameter in its admin panel. This security flaw permits an attacker to create a specifically crafted URL that, when accessed by the victim, executes arbitrary JavaScript in their browser. Although version 6.8 has been identified as vulnerable, other versions have not been tested and may also be susceptible to this exploit. OpenSolution has been informed about this security issue, but there has been no public disclosure regarding the affected versions.

References