https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2579.htmlhttps://patchthecve.com/cve/CVE-2007-2579.htmlTue, 16 Jun 2026 22:39:52 +0000MEDIUM 5.8: Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via (1) the form[mail] parameter to contact/contact/index.php; the (2) form[mods][] or (3) form[search_term] parameter to search/list/action_search/index.php; (4) the https://patchthecve.com/cve/CVE-2007-2578.htmlhttps://patchthecve.com/cve/CVE-2007-2578.htmlTue, 16 Jun 2026 22:39:52 +0000HIGH 7.5: Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the form[search_term] parameter.https://patchthecve.com/cve/CVE-2007-2577.htmlhttps://patchthecve.com/cve/CVE-2007-2577.htmlTue, 16 Jun 2026 22:39:52 +0000HIGH 7.5: Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via (1) the mode parameter to feeds.php, the (2) form[cat] parameter to (a) news/list/index.php or (b) certain news/details/id_*/action_create/index.php files, or (3) the form[mods][] p