A vulnerability labeled as problematic has been found in OpenSolution QuickCMS up to 6.8. The impacted element is an unknown function of the component Plugin List Endpoint. Such manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2026-33386. The attack can be executed remotely. There is not any exploit available.

It is best practice to apply a patch to resolve this issue.