CVE-2024-58308: Opensolution Quick CMS

Critical severity, CVSS 9.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Quick.CMS 6.7 contains a SQL injection vulnerability that allows unauthenticated attackers to bypass login authentication by manipulating the login form. Attackers can inject specific SQL payloads like ' or '1'='1 to gain unauthorized administrative access to the system.

Affected products

• Opensolution Quick CMS: version 6.7 only

Published 2025-12-11. Last modified 2026-06-17.