CVE-2021-45281: Quickbox

Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days.

QuickBox Pro v2.4.8 contains a cross-site scripting (XSS) vulnerability at "adminuseredit.php?usertoedit=XSS", as the user supplied input for the value of this parameter is not properly sanitized.

Affected products

• Quickbox Quickbox: version 2.4.8 only; version 2.5.8 only

Published 2022-02-07. Last modified 2026-06-17.