PatchTheCVE: e-publishhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2008-1981: Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, https://patchthecve.com/cve/CVE-2008-1981.htmlhttps://patchthecve.com/cve/CVE-2008-1981.htmlTue, 16 Jun 2026 22:52:52 +0000MEDIUM 6.8: Cross-site request forgery (CSRF) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to perform unauthorized actions as other users via unspecified vectors.CVE-2008-1980: Cross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupahttps://patchthecve.com/cve/CVE-2008-1980.htmlhttps://patchthecve.com/cve/CVE-2008-1980.htmlTue, 16 Jun 2026 22:52:52 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in E-Publish 5.x before 5.x-1.1 and 6.x before 6.x-1.0 beta1, a Drupal module, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2005-4393: Cross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers https://patchthecve.com/cve/CVE-2005-4393.htmlhttps://patchthecve.com/cve/CVE-2005-4393.htmlTue, 16 Jun 2026 22:18:43 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in show.cfm in e-publish CMS 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) obcatid and (2) comid parameters.