Q-Cms 12 CVEs across 1 Q-Cms products. Browse Q-Cms vulnerabilities, severities, and proof-of-concept exploits.
Q-Cms products with known CVEs Q-Cms CVEs — newest first CVE Severity Score Published Summary CVE-2025-50233Medium 6.52025-08-06 A vulnerability in QCMS version 6.0.5 allows authenticated users to read arbitrary files from the server due to insufficient validation of the "Name" parameter… CVE-2020-10578High 7.52020-03-14 An arbitrary file read vulnerability exists in system/controller/backend/template.php in QCMS v3.0.1. CVE-2018-14978High 8.82018-08-06 An issue was discovered in QCMS 3.0.1. CSRF exists via the backend/user/admin/add.html URI. CVE-2018-14977Medium 6.12018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/guest.php has XSS, as demonstrated by the name parameter, a different vulnerability than CVE-20… CVE-2018-14976Medium 4.82018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/category.php has XSS. CVE-2018-14975Medium 4.82018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/album.php has XSS. CVE-2018-14974Medium 4.82018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS. CVE-2018-14973Medium 4.82018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/product.php has XSS. CVE-2018-14972Medium 4.82018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/down.php has XSS. CVE-2018-14971Medium 4.82018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/user.php has XSS. CVE-2018-14970Medium 4.82018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/slideshow.php has XSS. CVE-2018-14969Medium 4.82018-08-06 An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/system.php has XSS.