https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-20725.htmlhttps://patchthecve.com/cve/CVE-2021-20725.htmlWed, 17 Jun 2026 03:34:19 +0000MEDIUM 6.1: Reflected cross-site scripting vulnerability in the admin page of [Calendar01] free edition ver1.0.1 and earlier allows a remote attacker to inject an arbitrary script via unspecified vectors.https://patchthecve.com/cve/CVE-2020-5616.htmlhttps://patchthecve.com/cve/CVE-2020-5616.htmlWed, 17 Jun 2026 03:21:42 +0000CRITICAL 9.8: [Calendar01], [Calendar02], [PKOBO-News01], [PKOBO-vote01], [Telop01], [Gallery01], [CalendarForm01], and [Link01] [Calendar01] free edition ver1.0.0, [Calendar02] free edition ver1.0.0, [PKOBO-News01] free edition ver1.0.3 and earlier, [PKOBO-vote01] free edition ver1.0.1 and earlier, [Telop01] frehttps://patchthecve.com/cve/CVE-2020-5615.htmlhttps://patchthecve.com/cve/CVE-2020-5615.htmlWed, 17 Jun 2026 03:21:41 +0000HIGH 8.8: Cross-site request forgery (CSRF) vulnerability in [Calendar01] free edition ver1.0.0 and [Calendar02] free edition ver1.0.0 allows remote attackers to hijack the authentication of administrators via unspecified vectors.