Description qdPM V9.1 is vulnerable to Cross Site Scripting (XSS) via qdPM\install\modules\database_config.php. Remediation References CVE-2020-19515 Related Vulnerabilities Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-0214) MySQL CVE-2020-2660 Vulnerability (CVE-2020-2660) WordPress Plugin Shopping Cart Multiple SQL Injection and Arbitrary File Upload Vulnerabilities (8.1.14) WordPress Plugin Media Library Assistant SQL Injection (2.84) MOVEit Transfer Improper Neutralization of Special Elements in Data Query Logic Vulnerability (CVE-2026-8649) Severity Medium Classification CVE-2020-19515 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities