[ Vendor · 2 CVEs ]
qloapps
CVEs affecting qloapps published in the last 30 days, plus any qloapps CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-116745 | 26 Oct 2026 | CVSS 6.5 | qloappsQloApps through 1.7.0 contains an information disclosure vulnerability in OrderConfirmationController::init() that allows unauthenticated attackers… | |
| CVE-2026-116746 | 26 Oct 2026 | CVSS 5.3 | qloappsQloApps 1.6.0 through 1.7.0 contains a missing authorization vulnerability in the qlohotelreview module's AddReview AJAX action that allows… |