Qloapps Security Vulnerabilities and Issues — Qloapps CVE List

Lucene search

WebkulQloapps

5 matches found

CVE•added 2025/02/10 8:15 p.m.•50 views

CVE-2025-1155

A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. This affects an unknown part of the file /stores of the component Your Location Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is planned to remove th...

6.1CVSS4.3AI score0.00046EPSS

CVE•added 2023/06/23 3:15 p.m.•46 views

CVE-2023-36289

An unauthenticated Cross-Site Scripting (XSS) vulnerability found in Webkul QloApps 1.6.0 allows an attacker to obtain a user's session cookie and then impersonate that user via POST email_create and back parameter.

6.1CVSS5.9AI score0.14845EPSS

CVE•added 2023/05/11 11:15 a.m.•44 views

CVE-2023-30256

Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create parameters in the AuthController.php file.

6.1CVSS5.8AI score0.73273EPSS

CVE•added 2023/06/23 4:15 p.m.•40 views

CVE-2023-36287

6.1CVSS5.9AI score0.12554EPSS

CVE•added 2024/01/17 3:15 a.m.•24 views

CVE-2023-36235

An issue in webkul qloapps before v1.6.0 allows an attacker to obtain sensitive information via the id_order parameter.

6.5CVSS6.2AI score0.00075EPSS