Advisories · Technology
qloapps.
Every CVE that names qloapps among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview
- qloapps
- Broken access control
- CVSS 6.9 Medium
QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation
- qloapps
- Broken access control
- CVSS 4.8 Medium
QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager
- QloApps
- Cross-site scripting (XSS)
- CVSS 8.2 High
QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php
- QloApps
- Weak cryptography or TLS