https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-52180.htmlhttps://patchthecve.com/cve/CVE-2025-52180.htmlWed, 17 Jun 2026 09:36:05 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in Zucchetti Ad Hoc Infinity 4.2 and earlier allows remote unauthenticated attackers to inject arbitrary JavaScript via the pHtmlSource parameter of the /ahi/jsp/gsfr_feditorHTML.jsp?pHtmlSource endpoint.https://patchthecve.com/cve/CVE-2024-51322.htmlhttps://patchthecve.com/cve/CVE-2024-51322.htmlWed, 17 Jun 2026 08:05:36 +0000MEDIUM 5.4: Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /jsp/home.jsp, /jsp/gsfr_feditorHTML.jsp, /servlet/SPVisualZoom, /jsp/gsmd_container.jsp componentshttps://patchthecve.com/cve/CVE-2024-51321.htmlhttps://patchthecve.com/cve/CVE-2024-51321.htmlWed, 17 Jun 2026 08:05:35 +0000HIGH 7.6: In Zucchetti Ad Hoc Infinity 2.4, an improper check on the m_cURL parameter allows an attacker to redirect the victim to an attacker-controlled website after the authentication.https://patchthecve.com/cve/CVE-2024-51320.htmlhttps://patchthecve.com/cve/CVE-2024-51320.htmlWed, 17 Jun 2026 08:05:35 +0000MEDIUM 5.4: Cross Site Scripting vulnerability in Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution via the /servlet/gsdm_fsave_htmltmp, /servlet/gsdm_btlk_openfile componentshttps://patchthecve.com/cve/CVE-2024-51319.htmlhttps://patchthecve.com/cve/CVE-2024-51319.htmlWed, 17 Jun 2026 08:05:35 +0000HIGH 7.3: A local file include vulnerability in the /servlet/Report of Zucchetti Ad Hoc Infinity 2.4 allows an authenticated attacker to achieve Remote Code Execution by uploading a jsp web/reverse shell through /jsp/zimg_upload.jsp.