Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

OpenSolution — Vulnerabilities & Security Advisories 31

Browse all 31 CVE security advisories affecting OpenSolution. AI-powered Chinese analysis, POCs, and references for each vulnerability.

OpenSolution operates as a software development and IT consulting firm, primarily providing custom enterprise solutions and digital transformation services. Its technical portfolio includes web applications and API integrations, which have historically exposed the organization to common vulnerability classes such as Remote Code Execution (RCE), Cross-Site Scripting (XSS), and broken access control. With twenty-one CVEs currently on record, these flaws often stem from insufficient input validation and improper authentication mechanisms within deployed client systems. While OpenSolution itself is not a consumer product, its development practices have led to security incidents affecting downstream users, particularly regarding privilege escalation and data exposure. The company has faced scrutiny over its patch management timelines, though no major public breaches directly attributable to OpenSolution’s internal infrastructure have been widely documented. Security audits suggest a need for stricter code review processes to mitigate these recurring risks in future deployments.

CVE ID Title CVSS Severity Published
CVE-2026-41875 Cross-Site Request Forgery in admin panel of Quick.Cart — Quick.Cart CWE-352 6.9 Medium 2026-09-29
CVE-2026-33385 Blind SQL Injection in Quick.CMS — Quick.CMS CWE-89 5.1 Medium 2026-07-29
CVE-2026-41874 Hard-coded admin credentials in Quick.Cart — Quick.Cart CWE-256 6.8 Medium 2026-07-28
CVE-2026-63303 Path Traversal in Quick.CMS — Quick.CMS CWE-23 5.1 Medium 2026-07-28
CVE-2026-63302 Local File Inclusion in Quick.CMS — Quick.CMS CWE-98 5.1 Medium 2026-07-28
CVE-2026-63301 Denial of Service in Quick.CMS — Quick.CMS CWE-602 7.0 High 2026-07-28
CVE-2026-11860 Insecure Deserialisation via Plaintext HTTP leading to Remote Code Execution in Quick.CMS — Quick.CMS CWE-502 - - 2026-06-15
CVE-2026-33386 XSS in QuickCMS — QuickCMS CWE-79 - - 2026-05-29
CVE-2026-33384 Session Fixation in QuickCMS — QuickCMS CWE-384 - - 2026-05-29
CVE-2021-47981 Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form — Quick.CMS CWE-79 5.4 Medium 2026-05-16
CVE-2026-1468 Cross-Site Request Forgery in QuickCMS — QuickCMS CWE-352 5.1 Medium 2026-03-06
CVE-2026-23796 Session Fixation in Quick.Cart — Quick.Cart CWE-384 8.1AI High AI 2026-02-05
CVE-2026-23797 Plaintext password display in Quick.Cart — Quick.Cart CWE-256 4.9AI Medium AI 2026-02-05
CVE-2025-67684 Remote Code Execution via Local File Inclusion in Quick.Cart — Quick.Cart CWE-22 7.2AI High AI 2026-01-22
CVE-2025-67683 Reflected XSS in Quick.Cart — Quick.Cart CWE-79 6.1AI Medium AI 2026-01-22
CVE-2024-58308 Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login — Quick.CMS CWE-89 9.8AI Critical AI 2025-12-11
CVE-2025-12465 Blind SQL Injection in QuickCMS — QuickCMS CWE-89 7.2AI High AI 2025-12-02
CVE-2025-10018 Multiple Stored XSS in QuickCMS — QuickCMS CWE-79 4.8 - 2025-11-14
CVE-2025-9982 Hard-coded admin credentials in Quick.CMS — QuickCMS CWE-256 8.8 - 2025-11-14
CVE-2025-10317 Multiple Cross-Site Request Forgery in Quick.Cart — Quick.Cart CWE-352 6.5AI Medium AI 2025-10-30
CVE-2025-9981 Multiple Stored XSS in QuickCMS — QuickCMS CWE-79 4.8AI Medium AI 2025-10-23
CVE-2025-9980 Multiple Stored XSS in QuickCMS — QuickCMS CWE-79 4.8AI Medium AI 2025-10-23
CVE-2025-55175 Reflected XSS in QuickCMS — QuickCMS CWE-79 4.8AI Medium AI 2025-08-28
CVE-2025-54544 Stored XSS in QuickCMS — QuickCMS CWE-79 4.8AI Medium AI 2025-08-28
CVE-2025-54543 Stored XSS in QuickCMS — QuickCMS CWE-79 4.8AI Medium AI 2025-08-28
CVE-2025-54542 Sending Password in GET Request — QuickCMS CWE-598 7.8AI High AI 2025-08-28
CVE-2025-54541 Cross-Site Request Forgery in QuickCMS — QuickCMS CWE-352 4.3AI Medium AI 2025-08-28
CVE-2025-54540 Reflected XSS in QuickCMS — QuickCMS CWE-79 4.8AI Medium AI 2025-08-28
CVE-2025-54175 Reflected Cross-Site Scripting in QuickCMS.EXT — Quick.CMS.EXT CWE-79 6.1AI Medium AI 2025-08-20
CVE-2025-54174 Cross-Site Request Forgery in QuickCMS — Quick.CMS CWE-352 6.5AI Medium AI 2025-08-20

This page lists every published CVE security advisory associated with OpenSolution. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.