PT-2026-41467 · Opensolution · Quick.Cms

Rahad Chowdhury · Published 2026-05-16 · Updated 2026-05-16 · CVE-2021-47981

NVD

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to inject malicious scripts by submitting XSS payloads through the sDescription parameter. Attackers can craft CSRF forms targeting the admin.php?p=sliders-form endpoint to execute arbitrary JavaScript in victim browsers when the form is submitted.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-47981

Affected Products

Quick.Cms

References · 5

• 🔥 https://exploit-db.com/exploits/50530 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47981 · Security Note
• https://vulncheck.com/advisories/quick-cms-cross-site-scripting-via-csrf-to-sliders-form · Note
• https://opensolution.org/download/home.html?sFile=Quick.Cms_v6.7-en.zip · Note
• https://opensolution.org · Note