BQE BillQuick Web Suite

What it is

BQE BillQuick Web Suite contains an SQL injection vulnerability when accessing the username parameter that may allow for unauthenticated, remote code execution.

What to do

Apply updates per vendor instructions.

Vendor notices and references

• nvd.nist.gov/vuln/detail/CVE-2021-42258

Description and required action as published by CISA. Full record at NVD.