PT-2025-46953 · Quick.Cms · Quick.Cms

Karol Czubernat · Published 2025-11-14 · Updated 2025-11-14 · CVE-2025-9982

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions QuickCMS version 6.8

Description A flaw exists where sensitive admin credentials are hardcoded in a configuration file and stored in plaintext. This allows attackers with access to the source code or the server file system to retrieve authentication details, potentially leading to privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Weakness Enumeration

CWE-256

Related Identifiers

CVE-2025-9982

Affected Products

Quick.Cms

References · 9

• https://osv.dev/vulnerability/CVE-2025-9982 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-9982 · Security Note
• https://t.me/cveNotify/142786 · Telegram Post
• https://twitter.com/CVEnew/status/1989355880538833010 · Twitter Post
• https://t.me/cveNotify/142783 · Telegram Post
• https://cert.pl/posts/2025/11/CVE-2025-9982 · Note
• https://t.me/CVEtracker/37331 · Telegram Post
• https://opensolution.org/cms-system-quick-cms.html · Note
• https://twitter.com/VulmonFeeds/status/1989343094089626080 · Twitter Post