VULNERABILITY INTELLIGENCE

CVE-2025-26058

CVSS score4.2 MEDIUM
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-02-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Description

Webkul QloApps v1.6.1 exposes authentication tokens in URLs during redirection. When users access the admin panel or other protected areas, the application appends sensitive authentication tokens directly to the URL.

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-598

Primary references