https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-21236.htmlhttps://patchthecve.com/cve/CVE-2020-21236.htmlWed, 17 Jun 2026 03:03:36 +0000HIGH 8.8: A vulnerability in /damicms-master/admin.php?s=/Article/doedit of DamiCMS v6.0 allows attackers to compromise and impersonate user accounts via obtaining a user's session cookie.https://patchthecve.com/cve/CVE-2020-18458.htmlhttps://patchthecve.com/cve/CVE-2020-18458.htmlWed, 17 Jun 2026 02:59:20 +0000HIGH 8.0: Cross Site Request Forgery (CSRF) vulnerability exists in DamiCMS v6.0.6 that can add an admin account via admin.php?s=/Admin/doadd.https://patchthecve.com/cve/CVE-2020-18451.htmlhttps://patchthecve.com/cve/CVE-2020-18451.htmlWed, 17 Jun 2026 02:59:19 +0000MEDIUM 4.8: Cross Site Scripting (XSS) vulnerability exists in DamiCMS v6.0.6 via the title parameter in the doadd function in LabelAction.class.php.