High severity7.2NVD Advisory· Published Jan 28, 2021· Updated Jun 17, 2026
CVE-2020-35754
CVE-2020-35754
Description
OpenSolution Quick.CMS < 6.7 and Quick.Cart < 6.7 allow an authenticated user to perform code injection (and consequently Remote Code Execution) via the input fields of the Language tab.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:opensolution:quick.cart:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:opensolution:quick.cart:*:*:*:*:*:*:*:*range: <6.7
- (no CPE)
- (no CPE)range: <6.7
cpe:2.3:a:opensolution:quick.cms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:opensolution:quick.cms:*:*:*:*:*:*:*:*range: <6.7
- (no CPE)range: <6.7
Patches
Vulnerability mechanics
References
4- packetstormsecurity.com/files/161189/Quick.CMS-6.7-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- secator.pl/index.php/2021/01/28/cve-2020-35754-authenticated-rce-in-quick-cms-and-quick-cart/nvdExploitThird Party Advisory
- opensolution.org/cms-system-quick-cms.htmlnvdProduct
- opensolution.org/security-fix-for-cart-and-cms%21-en-1136.htmlnvd
News mentions
0No linked articles in our index yet.