XSS in Opensolution Quickcms
CVE-2025-9981
QuickCMS is vulnerable to multiple Stored XSS in slider editor functionality (sliders-form). Malicious attacker with admin privileges can inject arbitrary HTML and JS into website, which will be rendered/executed on every page. By default…
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.000 (6.6th percentile) — read the EPSS interpretation.
Affected products
- Opensolution Quickcms — versions 6.8
Weakness classification (CWE)
References
- cert.pl/posts/2025/10/CVE-2025-9980 (third-party-advisory)
- opensolution.org/cms-system-quick-cms.html (product)