PatchTheCVE: edittaghttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2007-0119: Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary https://patchthecve.com/cve/CVE-2007-0119.htmlhttps://patchthecve.com/cve/CVE-2007-0119.htmlTue, 16 Jun 2026 22:34:57 +0000MEDIUM 6.8: Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script or HTML via the plain parameter to (1) mkpw_mp.cgi, (2) mkpw.pl, or (3) mkpw.cgi.CVE-2007-0118: Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary fileshttps://patchthecve.com/cve/CVE-2007-0118.htmlhttps://patchthecve.com/cve/CVE-2007-0118.htmlTue, 16 Jun 2026 22:34:57 +0000MEDIUM 4.3: Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an absolute pathname in the file parameter to (1) edittag.cgi, (2) edittag.pl, (3) edittag_mp.cgi, or (4) edittag_mp.pl.CVE-2003-1351: Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary filehttps://patchthecve.com/cve/CVE-2003-1351.htmlhttps://patchthecve.com/cve/CVE-2003-1351.htmlTue, 16 Jun 2026 22:03:58 +0000MEDIUM 5.0: Directory traversal vulnerability in edittag.cgi in EditTag 1.1 allows remote attackers to read arbitrary files via a "%2F.." (encoded slash dot dot) in the file parameter.