Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/quickapps/cms@2.0.0
purl pkg:composer/quickapps/cms@2.0.0
Tags Ghost
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2018-17102

Cross-Site Request Forgery (CSRF) An issue was discovered in QuickAppsCMS (aka QACMS). A CSRF vulnerability can change the administrator password … There are no reported fixed by versions.
CVE-2017-1000495

QuickApps CMS is vulnerable to Stored Cross-site Scripting in the user's real name field resulting in denial of service and … There are no reported fixed by versions.
CVE-2018-9108

Cross-Site Request Forgery (CSRF) CSRF in `/admin/user/manage/add` in QuickAppsCMS allows an unauthorized remote attacker to create an account with admin … There are no reported fixed by versions.
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-825g-f3g2-6vxf
QuickApps CMS Cross-site Scripting QuickApps CMS version 2.0.0 is vulnerable to Stored Cross-site Scripting in the user's real name field … CVE-2017-1000495