<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: qloapps</title><description>Every new CVE for qloapps.</description><link>https://agentprime.io/</link><item><title>CVE-2026-116746: QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview</title><link>https://agentprime.io/advisories/CVE-2026-116746/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116746/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Oct 2026 21:52:44 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-116745: QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation</title><link>https://agentprime.io/advisories/CVE-2026-116745/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-116745/</guid><description>CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 26 Oct 2026 21:52:43 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25558: QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager</title><link>https://agentprime.io/advisories/CVE-2026-25558/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25558/</guid><description>CVSS 4.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 08 Jun 2026 14:01:25 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-25861: QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php</title><link>https://agentprime.io/advisories/CVE-2026-25861/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25861/</guid><description>CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jun 2026 22:09:19 GMT</pubDate><category>CVE</category></item></channel></rss>