CVE-2020-35754

Publication date

2021-01-28 19:26:27

Family

mitre

State

PUBLISHED

Description

OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Language tab.