Medium severityNVD Advisory· Published Mar 6, 2026· Updated Aug 4, 2026
CVE-2026-1468
CVE-2026-1468
Description
QuickCMS is vulnerable to Cross-Site Request Forgery across multiple endpoints. An attacker can craft special website, which when visited by the victim, will automatically send a POST request with victim's privileges. This software does not implement any protection against this type of attack. All forms available in this software are potentially vulnerable.
This issue was fixed in a patch to version 6.8 published on 14.05.2026, deployments without this patch are still vulnerable
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.