Path Traversal in Opensolution Quick.cms

CVE-2026-63303

A Path Traversal vulnerability exists in Quick.CMS through the URI path component of HTTP requests, where the server fails to normalize dot-dot-slash (../) sequences before resolving and serving the requested file. An authenticated attacke…

Affected products

Weakness classification (CWE)

References