PatchTheCVEquickbox vulnerabilities
Recent CVEs affecting quickbox products. 2 tracked.
quickbox has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-02-07. Highest priority: CVE-2021-44981 (score 58/100).
- CVE-2021-45281 MEDIUM 6.1 DOWNGRADE QuickBox Pro v2.4.8 contains a cross-site scripting (XSS) vulnerability at "adminuseredit.php?usertoedit=XSS",
- CVE-2021-44981 HIGH 8.8 UPGRADE In QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter value and par
FAQ
How do I fix quickbox vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is quickbox being exploited right now?
None of the tracked quickbox CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which quickbox CVE should I patch first?
CVE-2021-44981 currently ranks highest (58/100): In QuickBox Pro v2.5.8 and below, the config.php file has a variable which takes a GET parameter value and par.