https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-3857.htmlhttps://patchthecve.com/cve/CVE-2023-3857.htmlWed, 17 Jun 2026 06:15:00 +0000LOW 3.5: A vulnerability, which was classified as problematic, was found in phpscriptpoint Ecommerce 1.15. This affects an unknown part of the file /product.php. The manipulation of the argument id leads to cross site scripting. It is possible to initiate the attack remotely. The identifier VDB-235209 was ashttps://patchthecve.com/cve/CVE-2023-3856.htmlhttps://patchthecve.com/cve/CVE-2023-3856.htmlWed, 17 Jun 2026 06:15:00 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in phpscriptpoint Ecommerce 1.15. Affected by this issue is some unknown functionality of the file /blog-single.php. The manipulation of the argument slug leads to cross site scripting. The attack may be launched remotely. The idenhttps://patchthecve.com/cve/CVE-2018-20849.htmlhttps://patchthecve.com/cve/CVE-2018-20849.htmlWed, 17 Jun 2026 01:53:35 +0000MEDIUM 6.1: Arastta eCommerce 1.6.2 is vulnerable to XSS via the PATH_INFO to the login/ URI.https://patchthecve.com/cve/CVE-2018-15202.htmlhttps://patchthecve.com/cve/CVE-2018-15202.htmlWed, 17 Jun 2026 01:42:13 +0000MEDIUM 6.3: An issue was discovered in Juunan06 eCommerce through 2018-08-05. There is a CSRF vulnerability in ee/eBoutique/app/template/includes/crudTreatment.php that can add new users and add products.