https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-40734.htmlhttps://patchthecve.com/cve/CVE-2025-40734.htmlWed, 17 Jun 2026 09:22:02 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.https://patchthecve.com/cve/CVE-2025-40733.htmlhttps://patchthecve.com/cve/CVE-2025-40733.htmlWed, 17 Jun 2026 09:22:02 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.https://patchthecve.com/cve/CVE-2025-40732.htmlhttps://patchthecve.com/cve/CVE-2025-40732.htmlWed, 17 Jun 2026 09:22:02 +0000HIGH 7.5: user enumeration vulnerability in Daily Expense Manager v1.0. To exploit this vulnerability a POST request must be sent using the name parameter in /check.phphttps://patchthecve.com/cve/CVE-2025-40731.htmlhttps://patchthecve.com/cve/CVE-2025-40731.htmlWed, 17 Jun 2026 09:22:02 +0000CRITICAL 9.8: SQL injection vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to retrieve, create, update and delete databases through the pname, pprice and id parameters in /update.php.