CVE-2026-63302

creationtimestamp| type| source ---|---|--- 2026-07-28 16:45:05+00:00| seen| https://cert.pl/en/posts/2026/07/CVE-2026-63301...

CVE-2026-63302

Quick.CMS is vulnerable to Local File Inclusion LFI in the admin.php endpoint via the p parameter. An authenticated attacker with admin privileges can include arbitrary files located within the application's directory structure via a crafted HTTP request. Successful exploitation allows disclosure...