CVE-2025-54175

Name of the Vulnerable Software and Affected Versions: QuickCMS.EXT version 6.8 QuickCMS.EXT (affected versions not specified)

Description: QuickCMS.EXT is susceptible to a Reflected Cross-Site Scripting (XSS) issue within the thumbnail viewer functionality. An attacker can create a malicious URL that, when opened, leads to the execution of arbitrary JavaScript code in the victim’s browser. The vulnerability resides in the sFileName parameter.

Recommendations: QuickCMS.EXT version 6.8: Address the vulnerability by sanitizing or validating the sFileName parameter within the thumbnail viewer functionality to prevent the injection of malicious scripts. QuickCMS.EXT (affected versions not specified): Address the vulnerability by sanitizing or validating the sFileName parameter within the thumbnail viewer functionality to prevent the injection of malicious scripts.