PatchTheCVE: chaoji cmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-18414: Stored cross site scripting (XSS) vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitraryhttps://patchthecve.com/cve/CVE-2020-18414.htmlhttps://patchthecve.com/cve/CVE-2020-18414.htmlWed, 17 Jun 2026 02:59:18 +0000MEDIUM 4.8: Stored cross site scripting (XSS) vulnerability in Chaoji CMS v2.18 that allows attackers to execute arbitrary code via /index.php?admin-master-webset.CVE-2020-18413: Stored cross site scripting (XSS) vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 thahttps://patchthecve.com/cve/CVE-2020-18413.htmlhttps://patchthecve.com/cve/CVE-2020-18413.htmlWed, 17 Jun 2026 02:59:18 +0000MEDIUM 4.8: Stored cross site scripting (XSS) vulnerability in /index.php?admin-master-navmenu-add of Chaoji CMS v2.18 that allows attackers to execute arbitrary code.CVE-2020-18410: A stored cross site scripting (XSS) vulnerability in /index.php?admin-master-article-edit of Chaoji CMS v2.18 https://patchthecve.com/cve/CVE-2020-18410.htmlhttps://patchthecve.com/cve/CVE-2020-18410.htmlWed, 17 Jun 2026 02:59:18 +0000MEDIUM 4.8: A stored cross site scripting (XSS) vulnerability in /index.php?admin-master-article-edit of Chaoji CMS v2.18 that allows attackers to obtain administrator privileges.