QloApps
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 8, 2026 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →QloApps through 1.7.0 IDOR via OrderDetailController Refund Request
QloApps through 1.7.0 Missing Hotel Access Restriction in Credit Slips
QloApps through 1.7.0 Authorization Bypass via id_hotel in Room Type Creation
QloApps through 1.7.0 Reflected XSS via Search Alias Validation Errors
QloApps through 1.7.0 Reflected XSS via Advanced Price Rule Name and Impact Value
QloApps through 1.7.0 Reflected XSS via Additional Facility Price Field
QloApps through 1.7.0 Insecure Direct Object Reference in Back-Office AJAX Handlers
QloApps through 1.7.0 Authorization Bypass via id_hotel in Admin Room Booking
QloApps through 1.7.0 Authorization Bypass via ajaxProcessBulkUpdateRooms
QloApps through 1.7.0 Reflected XSS via Length of Stay Fields
Monitor QloApps in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.