https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-46041.htmlhttps://patchthecve.com/cve/CVE-2025-46041.htmlSun, 05 Jul 2026 01:21:46 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interface (/admin/pages/add).https://patchthecve.com/cve/CVE-2024-29499.htmlhttps://patchthecve.com/cve/CVE-2024-29499.htmlWed, 17 Jun 2026 07:22:51 +0000HIGH 7.4: Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2.https://patchthecve.com/cve/CVE-2024-29338.htmlhttps://patchthecve.com/cve/CVE-2024-29338.htmlWed, 17 Jun 2026 07:22:45 +0000LOW 2.4: Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2.