OpenSolution QuickCMS.EXT Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in OpenSolution QuickCMS.EXT version 6.8. The issue arises in the thumbnail viewer functionality, where the 'sFileName' parameter can be exploited to execute arbitrary JavaScript in the victim's browser. Although the vendor was notified about this vulnerability, they did not provide details on the vulnerable version range. However, version 6.8 has been tested and confirmed as vulnerable, while other versions may also be affected.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious JavaScript in the context of the victim's browser.