agentprime: webkul-qloappsEvery new CVE for webkul-qloapps.https://agentprime.io/CVE-2026-115326: QloApps through 1.7.0 IDOR via OrderDetailController Refund Requesthttps://agentprime.io/advisories/CVE-2026-115326/https://agentprime.io/advisories/CVE-2026-115326/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 22 Oct 2026 10:57:44 GMTCVECVE-2026-110229: QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slipshttps://agentprime.io/advisories/CVE-2026-110229/https://agentprime.io/advisories/CVE-2026-110229/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:50:12 GMTCVECVE-2026-110226: QloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type Creationhttps://agentprime.io/advisories/CVE-2026-110226/https://agentprime.io/advisories/CVE-2026-110226/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:50:11 GMTCVECVE-2026-110224: QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errorshttps://agentprime.io/advisories/CVE-2026-110224/https://agentprime.io/advisories/CVE-2026-110224/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:50:09 GMTCVECVE-2026-110221: QloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact Valuehttps://agentprime.io/advisories/CVE-2026-110221/https://agentprime.io/advisories/CVE-2026-110221/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:50:07 GMTCVECVE-2026-110219: QloApps through 1.7.0 Reflected XSS via Additional Facility Price Fieldhttps://agentprime.io/advisories/CVE-2026-110219/https://agentprime.io/advisories/CVE-2026-110219/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 13 Oct 2026 18:50:06 GMTCVECVE-2026-109393: QloApps through 1.7.0 Insecure Direct Object Reference in Back-Office AJAX Handlershttps://agentprime.io/advisories/CVE-2026-109393/https://agentprime.io/advisories/CVE-2026-109393/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Oct 2026 15:16:40 GMTCVECVE-2026-107702: QloApps through 1.7.0 Authorization Bypass via id_hotel in Admin Room Bookinghttps://agentprime.io/advisories/CVE-2026-107702/https://agentprime.io/advisories/CVE-2026-107702/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 08 Oct 2026 18:08:52 GMTCVECVE-2026-105836: QloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRoomshttps://agentprime.io/advisories/CVE-2026-105836/https://agentprime.io/advisories/CVE-2026-105836/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Oct 2026 12:57:55 GMTCVECVE-2026-103590: QloApps through 1.7.0 Reflected XSS via Length of Stay Fieldshttps://agentprime.io/advisories/CVE-2026-103590/https://agentprime.io/advisories/CVE-2026-103590/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 23:02:35 GMTCVECVE-2026-103589: QloApps through 1.7.0 Reflected XSS via Room Type Editorhttps://agentprime.io/advisories/CVE-2026-103589/https://agentprime.io/advisories/CVE-2026-103589/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 23:02:34 GMTCVECVE-2026-103588: QloApps through 1.7.0 Reflected XSS via exceptions fieldhttps://agentprime.io/advisories/CVE-2026-103588/https://agentprime.io/advisories/CVE-2026-103588/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 23:02:33 GMTCVECVE-2026-103587: QloApps through 1.7.0 Reflected XSS via Book Now Search Parametershttps://agentprime.io/advisories/CVE-2026-103587/https://agentprime.io/advisories/CVE-2026-103587/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 30 Sep 2026 23:02:32 GMTCVECVE-2026-93988: QloApps through 1.7.0 Arbitrary File Read via getEmailHTMLhttps://agentprime.io/advisories/CVE-2026-93988/https://agentprime.io/advisories/CVE-2026-93988/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 19 Sep 2026 22:58:09 GMTCVECVE-2026-92234: QloApps through 1.7.0 Reflected XSS via Hotel Feature Validation Errorshttps://agentprime.io/advisories/CVE-2026-92234/https://agentprime.io/advisories/CVE-2026-92234/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 20:56:46 GMTCVECVE-2026-89268: QloApps through 1.7.0 Reflected XSS via List Filter Parametershttps://agentprime.io/advisories/CVE-2026-89268/https://agentprime.io/advisories/CVE-2026-89268/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 01:50:33 GMTCVECVE-2026-75498: Webkul QloApps SQL injectionhttps://agentprime.io/advisories/CVE-2026-75498/https://agentprime.io/advisories/CVE-2026-75498/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 16:37:43 GMTCVECVE-2026-75497: Webkul QloApps SQL injectionhttps://agentprime.io/advisories/CVE-2026-75497/https://agentprime.io/advisories/CVE-2026-75497/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 16:37:10 GMTCVECVE-2026-75496: Webkul QloApps improper file upload validationhttps://agentprime.io/advisories/CVE-2026-75496/https://agentprime.io/advisories/CVE-2026-75496/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 16:36:42 GMTCVECVE-2025-10759: Webkul QloApps CSRF Token authorizationhttps://agentprime.io/advisories/CVE-2025-10759/https://agentprime.io/advisories/CVE-2025-10759/CVSS 6.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sun, 21 Sep 2025 01:02:06 GMTCVECVE-2025-6173: Webkul QloApps ajax_products_list.php sql injectionhttps://agentprime.io/advisories/CVE-2025-6173/https://agentprime.io/advisories/CVE-2025-6173/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 17 Jun 2025 06:31:07 GMTCVECVE-2025-1155: Webkul QloApps Your Location Search stores cross site scriptinghttps://agentprime.io/advisories/CVE-2025-1155/https://agentprime.io/advisories/CVE-2025-1155/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Feb 2025 20:00:13 GMTCVECVE-2025-1074: Webkul QloApps URL mylogout cross-site request forgeryhttps://agentprime.io/advisories/CVE-2025-1074/https://agentprime.io/advisories/CVE-2025-1074/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 06 Feb 2025 14:00:12 GMTCVE