Skip to content

Product

Qibo CMS vulnerabilities

2 published CVES affecting Qibo CMS, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest Qibo CMS CVEs

Newest publication first

  1. CVE-2026-6649 Qibo CMS headers server-side request forgery

    Published
    MediumCVSS 5.3 EPSS 0.21%

    A vulnerability was determined in Qibo CMS 1.0. Affected by this issue is some unknown functionality of the file /index/image/headers. Executing a manipulation of the argument starts can lead to server-side request forgery. The attack can be launched remotely. The exploit has bee...

  2. CVE-2026-6648 Qibo CMS Internal Message cross site scripting

    Published
    MediumCVSS 5.1 EPSS 0.19%

    A vulnerability was found in Qibo CMS 1.0. Affected by this vulnerability is an unknown functionality of the component Internal Message Module. Performing a manipulation results in cross site scripting. The attack can be initiated remotely. The exploit has been made public and co...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.