Skip to content
Sign in
6.5 Medium

CVE-2025-54046 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Stored XSS.This issue affects Cost Calculator: from n/a through <= 7.4.

Affected products and versions

Product Affected versions Fixed in
Cost Calculator 7.4 earliest → 7.4 No fix stated

Other CVEs of Cost Calculator

The 2 CVEs of Cost Calculator →
CVE-2025-54047 Missing Authorization vulnerability in QuanticaLabs Cost Calculator ql-cost-calculator allows Exploiting Incorrectly… 4.3 Medium
Track this CVE