CVE-2025-54172

creationtimestamp| type| source ---|---|--- 2025-08-20 13:07:16+00:00| seen| Telegram/vW9XrbRCNTKtLSTiNVKxXlKq1pTPmRzi66LsKKgxA87brE4 2025-08-20 13:07:17+00:00| seen| Telegram/p2VvTiRuX7x1xEJQH1VMDTGw7FuRSDzOOJ24OkqOUm3TNS4 2025-08-20 13:07:20+00:00| seen|...

CVE-2025-54172

CVE-2025-54172 affects QuickCMS. The vulnerability is a Stored XSS in the sTitle parameter of the page editor . An attacker with admin privileges can inject arbitrary HTML/JS that will be rendered when visiting the edited page; regular admin users cannot inject scripts. Only version 6.8 was teste...