CVE-2025-54540

MediumCVSS 6.1/10Last modified Oct 18, 2026

Description

QuickCMS is vulnerable to Reflected XSS via sSort parameter in admin's panel functionality. A malicious attacker can craft a specially crafted URL that, when opened, results in arbitrary JavaScript execution in the victim's browser.

The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 6.8 was tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Aug 28, 2025
Last modified: Oct 18, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-545414.3QuickCMS is vulnerable to Cross-Site Request Forgery in page deletion functionality. Malicious attacker can craft special website, which whe CVE-2025-545425.5QuickCMS sends password and login via GET Request. This allows a local attacker with access to the victim's browser history to obtain the ne CVE-2025-545434.8QuickCMS is vulnerable to Stored XSS via sDescriptionMeta parameter in page editor SEO functionality. Malicious attacker with admin privileg CVE-2025-545444.8QuickCMS is vulnerable to Stored XSS via aDirFilesDescriptions parameter in files editor functionality. Malicious attacker with admin privil CVE-2025-545457.8On affected platforms, a restricted user could break out of the CLI sandbox to the system shell and elevate their privileges.CVE-2025-545467.5On affected platforms, restricted users could use SSH port forwarding to access host-internal services CVE-2025-545475.3On affected platforms, if SSH session multiplexing was configured on the client side, SSH sessions (e.g, scp, sftp) multiplexed onto the sam CVE-2025-545484.3On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)CVE-2025-545495.9Cryptographic validation of upgrade images could be circumventing by dropping a specifically crafted file into the upgrade ISO CVE-2025-54558.4An issue was found in the private API function qDecodeDataUrl() in QtCore, which is used in QTextDocument and QNetworkReply, and, potentiall CVE-2025-545508.1The example example_xcom that was included in airflow documentation implemented unsafe pattern of reading value from xcom in the way that co CVE-2025-545514.3Synapse Mobility 8.0, 8.0.1, 8.0.2, 8.1, and 8.1.1 contain a privilege escalation vulnerability through external control of Web parameter. I