OpenSolution QuickCMS Reflected Cross-Site Scripting Vulnerability

A reflected cross-site scripting vulnerability has been identified in OpenSolution QuickCMS version 6.8. The issue arises in the admin panel functionality, where the 'sSort' parameter can be exploited to execute arbitrary JavaScript in the victim's browser. Although the vendor was notified about this vulnerability, they did not provide details regarding the affected version range. Only QuickCMS version 6.8 has been tested and confirmed as vulnerable, while other versions may also be at risk.

Impact

Exploitation of this vulnerability allows for reflected cross-site scripting, where an attacker can execute malicious JavaScript in the context of the victim's browser.