https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-40721.htmlhttps://patchthecve.com/cve/CVE-2025-40721.htmlWed, 17 Jun 2026 09:22:01 +0000MEDIUM 5.4: Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_factura parameter in /<Client>FacturaE/listado_facturas_ficha.https://patchthecve.com/cve/CVE-2025-40720.htmlhttps://patchthecve.com/cve/CVE-2025-40720.htmlWed, 17 Jun 2026 09:22:01 +0000MEDIUM 6.1: Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the campo parameter in /<Client>FacturaE/VerFacturaPDF.https://patchthecve.com/cve/CVE-2025-40719.htmlhttps://patchthecve.com/cve/CVE-2025-40719.htmlWed, 17 Jun 2026 09:22:01 +0000MEDIUM 6.1: Reflected Cross-site Scripting (XSS) vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending a malicious URL trhough the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.https://patchthecve.com/cve/CVE-2025-40718.htmlhttps://patchthecve.com/cve/CVE-2025-40718.htmlWed, 17 Jun 2026 09:22:01 +0000HIGH 7.5: Improper error handling vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to send malformed payloads to generate error messages containing sensitive information.https://patchthecve.com/cve/CVE-2025-40717.htmlhttps://patchthecve.com/cve/CVE-2025-40717.htmlWed, 17 Jun 2026 09:22:00 +0000CRITICAL 9.8: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pagina.filter.categoria mensaje in /QuiterGatewayWeb/api/v1/sucesospagina.https://patchthecve.com/cve/CVE-2025-40716.htmlhttps://patchthecve.com/cve/CVE-2025-40716.htmlWed, 17 Jun 2026 09:22:00 +0000CRITICAL 9.8: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the suceso.contenido mensaje in /QMSCliente/Sucesos.action.https://patchthecve.com/cve/CVE-2025-40715.htmlhttps://patchthecve.com/cve/CVE-2025-40715.htmlWed, 17 Jun 2026 09:22:00 +0000CRITICAL 9.8: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo mensaje in /QISClient/api/v1/sucesospaginas.https://patchthecve.com/cve/CVE-2025-40714.htmlhttps://patchthecve.com/cve/CVE-2025-40714.htmlWed, 17 Jun 2026 09:22:00 +0000CRITICAL 9.8: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo id_factura in /<Client>FacturaE/listado_facturas_ficha.jsp.https://patchthecve.com/cve/CVE-2025-40713.htmlhttps://patchthecve.com/cve/CVE-2025-40713.htmlWed, 17 Jun 2026 09:22:00 +0000CRITICAL 9.8: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the campo parameter in/<Client>FacturaE/BusquedasFacturasSesion.https://patchthecve.com/cve/CVE-2025-40712.htmlhttps://patchthecve.com/cve/CVE-2025-40712.htmlWed, 17 Jun 2026 09:22:00 +0000CRITICAL 9.8: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/DescargarFactura.https://patchthecve.com/cve/CVE-2025-40711.htmlhttps://patchthecve.com/cve/CVE-2025-40711.htmlWed, 17 Jun 2026 09:22:00 +0000CRITICAL 9.8: SQL injection vulnerability in versions prior to 4.7.0 of Quiter Gateway by Quiter. This vulnerability allows an attacker to retrieve, create, update and delete databases through the id_concesion parameter in /<Client>FacturaE/VerFacturaPDF.