Threats tagged 'ghsa-567h-vqw8-c72f'

QuickCMS version 6.8 contains a vulnerability where sensitive admin credentials are hardcoded in a configuration file and stored in plaintext. This allows attackers with access to the source code or server file system to retrieve these credentials, potentially leading to privilege escalation. The vendor has not provided details on affected versions beyond confirming version 6.8 as vulnerable. No patch or remediation information is currently available.