QuickCMS.EXT is vulnerable to Reflected XSS in the sFileName parameter within the thumbnail viewer functionality. An attacker can craft a malicious URL that leads to arbitrary JavaScript execution in the victim’s browser upon opening. The vendor was notified about this vulnerability but did not provide details regarding the affected versions, although version 6.8 was confirmed as vulnerable.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.6 | CVE-2025-54175 |
Exploitation
To exploit this vulnerability, an attacker can create a specially crafted URL that includes malicious JavaScript code in the sFileName parameter. When a victim clicks on this URL, the malicious script executes in their browser, potentially leading to unauthorized actions or data theft.
Affected Products
- QuickCMS.EXT version 6.8: Confirmed as vulnerable to the reflected XSS attack.
- Other versions: Not tested but may also be vulnerable.
Mitigation
To mitigate this vulnerability, it is recommended that users upgrade to a patched version of QuickCMS.EXT as soon as it becomes available. Additionally, implementing input validation and sanitization for user inputs can help prevent XSS attacks.