qlstudio

Products

ProductCVEsExploitedLatest
Export User Data1–Jun 30, 2026

Exploited and recent CVEs

  • CVE-2026-12240 High 8.0 Export User Data <= 2.2.6 - Authenticated (Subscriber+) PHP Object Injection to Arbitrary File Deletion via display_name Field 0.6%