High (8.8) in quickbox quickbox. EPSS 17% chance of exploitation in the next 30 days.
QuickBox Community Edition through 2.5.5 and Pro Edition through 2.1.8 allows an authenticated remote attacker to execute code on the server via command injection in the servicestart parameter.
Severity
CVSS 3.1
8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
17% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)