https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-36471.htmlhttps://patchthecve.com/cve/CVE-2021-36471.htmlWed, 17 Jun 2026 03:58:52 +0000CRITICAL 9.8: Directory Traversal vulnerability in AdminLTE 3.1.0 allows remote attackers to gain escalated privilege and view sensitive information via /admin/index2.html, /admin/index3.html URIs. Note: AdminLTE developers dispute that this a weakness with AdminLTE and is instead a misconfiguration error on varihttps://patchthecve.com/cve/CVE-2022-23513.htmlhttps://patchthecve.com/cve/CVE-2022-23513.htmlWed, 17 Jun 2026 04:30:16 +0000MEDIUM 5.3: Pi-Hole is a network-wide ad blocking via your own Linux hardware, AdminLTE is a Pi-hole Dashboard for stats and more. In case of an attack, the threat actor will obtain the ability to perform an unauthorized query for blocked domains on `queryads` endpoint. In the case of application, this vulnerahttps://patchthecve.com/cve/CVE-2022-31029.htmlhttps://patchthecve.com/cve/CVE-2022-31029.htmlWed, 17 Jun 2026 04:44:38 +0000MEDIUM 5.9: AdminLTE is a Pi-hole Dashboard for stats and configuration. In affected versions inserting code like `<script>alert("XSS")</script>` in the field marked with "Domain to look for" and hitting <kbd>enter</kbd> (or clicking on any of the buttons) will execute the script. The user must be logged in to