PatchTheCVE: dilicmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-8440: An issue was discovered in DiliCMS 2.4.0https://patchthecve.com/cve/CVE-2019-8440.htmlhttps://patchthecve.com/cve/CVE-2019-8440.htmlWed, 17 Jun 2026 02:42:00 +0000MEDIUM 4.8: An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of "System setting->site setting" of admin/index.php, aka site_logo.CVE-2019-8439: An issue was discovered in DiliCMS 2.4.0https://patchthecve.com/cve/CVE-2019-8439.htmlhttps://patchthecve.com/cve/CVE-2019-8439.htmlWed, 17 Jun 2026 02:42:00 +0000MEDIUM 5.4: An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting->site setting" of admin/index.php, aka site_domain.CVE-2019-8438: An issue was discovered in DiliCMS 2.4.0https://patchthecve.com/cve/CVE-2019-8438.htmlhttps://patchthecve.com/cve/CVE-2019-8438.htmlWed, 17 Jun 2026 02:42:00 +0000MEDIUM 4.8: An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting->site setting" of admin/index.php, aka site_name.CVE-2018-19291: An issue was discovered in DiliCMS 2.4.0https://patchthecve.com/cve/CVE-2018-19291.htmlhttps://patchthecve.com/cve/CVE-2018-19291.htmlWed, 17 Jun 2026 01:49:05 +0000MEDIUM 6.5: An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI.CVE-2018-18210: XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.https://patchthecve.com/cve/CVE-2018-18210.htmlhttps://patchthecve.com/cve/CVE-2018-18210.htmlWed, 17 Jun 2026 01:46:51 +0000MEDIUM 6.1: XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.CVE-2018-18209: XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameterhttps://patchthecve.com/cve/CVE-2018-18209.htmlhttps://patchthecve.com/cve/CVE-2018-18209.htmlWed, 17 Jun 2026 01:46:51 +0000MEDIUM 6.1: XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_type parameter.CVE-2018-10430: An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0https://patchthecve.com/cve/CVE-2018-10430.htmlhttps://patchthecve.com/cve/CVE-2018-10430.htmlWed, 17 Jun 2026 01:33:59 +0000MEDIUM 4.8: An issue was discovered in DiliCMS (aka DiligentCMS) 2.4.0. There is a Stored XSS Vulnerability in the fourth textbox of "System setting->site setting" of admin/index.php.