Advisories · Technology

OpenSolution Quick.Cart.

Every CVE that names OpenSolution Quick.Cart among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-41875 CVE record

CVSS 6.9 Medium

Cross-Site Request Forgery in admin panel of Quick.Cart
- OpenSolution Quick.Cart
- Cross-site request forgery (CSRF)
Not analysed yet 29 Sept 2026
CVE-2026-41874 CVE record

CVSS 6.8 Medium

Hard-coded admin credentials in Quick.Cart
- OpenSolution Quick.Cart
- CWE-256
Not analysed yet 28 Jul 2026
CVE-2026-23796 CVE record

CVSS 4.8 Medium

Session Fixation in Quick.Cart
- OpenSolution Quick.Cart
- Authentication bypass
Not analysed yet 5 Feb 2026
CVE-2026-23797 CVE record

CVSS 6.9 Medium

Plaintext password display in Quick.Cart
- OpenSolution Quick.Cart
- CWE-256
Not analysed yet 5 Feb 2026
CVE-2025-67684 CVE record

CVSS 9.4 CriticalCritical · CVSS 9+

Remote Code Execution via Local File Inclusion in Quick.Cart
- OpenSolution Quick.Cart
- Path traversal
Not analysed yet 22 Jan 2026
CVE-2025-67683 CVE record

CVSS 5.1 Medium

Reflected XSS in Quick.Cart
- OpenSolution Quick.Cart
- Cross-site scripting (XSS)
Not analysed yet 22 Jan 2026
CVE-2025-10317 CVE record

CVSS 5.1 Medium

Multiple Cross-Site Request Forgery in Quick.Cart
- OpenSolution Quick.Cart
- Cross-site request forgery (CSRF)
Not analysed yet 30 Oct 2025