QloApps QloApps

• CVE-2026-116746 Medium 5.3 QloApps 1.6.0 through 1.7.0 Unauthorized Hotel Review Submission via qlohotelreview 0.2%
• CVE-2026-116745 Medium 6.5 QloApps through 1.7.0 Guest Order Disclosure via id_cart in Order Confirmation 0.2%
• CVE-2026-25558 Medium 4.8 QloApps 1.7.0 Stored XSS via SVG File Upload in Admin File Manager 0.2%
• CVE-2026-25861 Medium 5.9 QloApps 1.7.0 Weak Password Hashing via MD5 in Tools.php 0.2%