https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3257.htmlhttps://patchthecve.com/cve/CVE-2025-3257.htmlWed, 17 Jun 2026 09:19:32 +0000MEDIUM 4.3: A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may behttps://patchthecve.com/cve/CVE-2025-3256.htmlhttps://patchthecve.com/cve/CVE-2025-3256.htmlWed, 17 Jun 2026 09:19:32 +0000MEDIUM 6.3: A vulnerability was found in xujiangfei admintwo 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /user/updateSet. The manipulation of the argument email leads to improper access controls. The attack may be launched remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-3255.htmlhttps://patchthecve.com/cve/CVE-2025-3255.htmlWed, 17 Jun 2026 09:19:31 +0000MEDIUM 4.3: A vulnerability was found in xujiangfei admintwo 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /user/home. The manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit has behttps://patchthecve.com/cve/CVE-2025-3254.htmlhttps://patchthecve.com/cve/CVE-2025-3254.htmlWed, 17 Jun 2026 09:19:31 +0000MEDIUM 6.3: A vulnerability was found in xujiangfei admintwo 1.0. It has been classified as critical. Affected is an unknown function of the file /resource/add. The manipulation of the argument description leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been dhttps://patchthecve.com/cve/CVE-2025-3253.htmlhttps://patchthecve.com/cve/CVE-2025-3253.htmlWed, 17 Jun 2026 09:19:31 +0000LOW 3.5: A vulnerability was found in xujiangfei admintwo 1.0 and classified as problematic. This issue affects some unknown processing of the file /ztree/insertTree. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to thttps://patchthecve.com/cve/CVE-2025-3252.htmlhttps://patchthecve.com/cve/CVE-2025-3252.htmlWed, 17 Jun 2026 09:19:31 +0000LOW 3.5: A vulnerability has been found in xujiangfei admintwo 1.0 and classified as problematic. This vulnerability affects unknown code of the file /resource/add. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to thehttps://patchthecve.com/cve/CVE-2025-3251.htmlhttps://patchthecve.com/cve/CVE-2025-3251.htmlWed, 17 Jun 2026 09:19:31 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in xujiangfei admintwo 1.0. This affects an unknown part of the file /user/updateSet. The manipulation of the argument motto leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed t