Skip to content
QQloApps
Products
| Product | CVEs | Exploited | Latest |
|---|
| QloApps | 4 | – | Oct 26, 2026 |
Exploited and recent CVEs
-
CVE-2026-116746
Medium 5.3
QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview
0.2%
-
CVE-2026-116745
Medium 6.5
QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation
0.2%
-
CVE-2026-25558
Medium 4.8
QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager
0.2%
-
CVE-2026-25861
Medium 5.9
QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php
0.2%