Qloapps

2 CVEs in 1 Qloapps product, including Qloapps. Newest: CVE-2026-25558 (2026-06-08). Severity, EPSS and public exploits for each.

Qloapps products with known CVEs

ProductCVEs
Qloapps2
Qloapps CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-25558Medium4.82026-06-08QloApps through 1.7.0 contains a stored cross-site scripting vulnerability in the admin file manager that allows authenticated administrators to inject malicio…
CVE-2026-25861Medium5.92026-06-02QloApps through 1.7.0, fixed in commit 64e9722, contains a weak cryptographic algorithm vulnerability that allows attackers to compromise user credentials by e…