nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-47981 CVE-2021-47981
MEDIUM
Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders Form
Record summary
CVE-2021-47981 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.
Description
Quick.CMS 6.7 contains a cross-site scripting vulnerability in the sliders form that allows authenticated attackers to inject malicious scripts by submitting XSS payloads through the sDescription parameter. Attackers can craft CSRF forms targeting the admin.php?p=sliders-form endpoint to execute arbitrary JavaScript in victim browsers when the form is submitted.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
CISA SSVC decision
ExploitationPoC
AutomatableNo
Technical impactPartial
CISA Coordinator · SSVC 2.0.3 · Evaluated May 18, 2026 · Source: CVE List
Affected products and versions
1| Product | Source | Version range | Status |
|---|---|---|---|
Quick.CMSBrowse Opensolution / Quick.CMS | CVE List | 6.7 | affected |
Proofs of concept
1Catalogued exploits
ExploitDBQuick.CMS 6.7 - Cross Site Request Forgery (CSRF) to Cross Site Scripting (XSS) (Authenticated)ExploitDB exploitby Rahad ChowdhuryNot analyzed1 file
References
5Official Product Homepageproduct
https://opensolution.org/ Product Referenceproduct
https://opensolution.org/download/home.html?sFile=Quick.Cms_v6.7-en.zip ExploitDB-50530exploit
https://www.exploit-db.com/exploits/50530 VulnCheck Advisory: Quick.CMS 6.7 Cross-Site Scripting via CSRF to Sliders FormThird-party advisory
https://www.vulncheck.com/advisories/quick-cms-cross-site-scripting-via-csrf-to-sliders-form