https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-1060.htmlhttps://patchthecve.com/cve/CVE-2015-1060.htmlWed, 17 Jun 2026 00:21:41 +0000MEDIUM 5.8: Open redirect vulnerability in lib/Cake/Controller/Controller.php in AdaptCMS 3.0.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.https://patchthecve.com/cve/CVE-2015-1059.htmlhttps://patchthecve.com/cve/CVE-2015-1059.htmlWed, 17 Jun 2026 00:21:41 +0000MEDIUM 6.5: Unrestricted file upload vulnerability in admin/files/add in AdaptCMS 3.0.3 allows remote authenticated users to execute arbitrary PHP code by uploading a file with a PHP extension, then accessing it via a direct request to the file in /app/webroot/uploads.https://patchthecve.com/cve/CVE-2015-1058.htmlhttps://patchthecve.com/cve/CVE-2015-1058.htmlWed, 17 Jun 2026 00:21:41 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in AdaptCMS 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the (1) data[Category][title] parameter to admin/categories/add, (2) data[Field][title] parameter to admin/fields/ajax_fields/, (3) name property in a basicInfo JSOhttps://patchthecve.com/cve/CVE-2011-5108.htmlhttps://patchthecve.com/cve/CVE-2011-5108.htmlTue, 16 Jun 2026 23:35:57 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in config.php in AdaptCMS 2.0.0 and 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.