https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-14717.htmlhttps://patchthecve.com/cve/CVE-2017-14717.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Description parameter.https://patchthecve.com/cve/CVE-2017-14716.htmlhttps://patchthecve.com/cve/CVE-2017-14716.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Title parameter.https://patchthecve.com/cve/CVE-2017-14715.htmlhttps://patchthecve.com/cve/CVE-2017-14715.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Alerts Title parameter.https://patchthecve.com/cve/CVE-2017-14714.htmlhttps://patchthecve.com/cve/CVE-2017-14714.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Subject parameter.https://patchthecve.com/cve/CVE-2017-14713.htmlhttps://patchthecve.com/cve/CVE-2017-14713.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Phonecalls Description parameter.https://patchthecve.com/cve/CVE-2017-14712.htmlhttps://patchthecve.com/cve/CVE-2017-14712.htmlWed, 17 Jun 2026 01:06:39 +0000MEDIUM 5.4: In EPESI 1.8.2 rev20170830, there is Stored XSS in the Tasks Phonecall Notes Title parameter.https://patchthecve.com/cve/CVE-2017-9624.htmlhttps://patchthecve.com/cve/CVE-2017-9624.htmlWed, 17 Jun 2026 01:28:36 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted currency decimal-sign data.https://patchthecve.com/cve/CVE-2017-9623.htmlhttps://patchthecve.com/cve/CVE-2017-9623.htmlWed, 17 Jun 2026 01:28:36 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted country data.https://patchthecve.com/cve/CVE-2017-9622.htmlhttps://patchthecve.com/cve/CVE-2017-9622.htmlWed, 17 Jun 2026 01:28:36 +0000MEDIUM 6.1: Multiple cross-site scripting (XSS) vulnerabilities in Telaxus/EPESI 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via crafted common data.https://patchthecve.com/cve/CVE-2017-9621.htmlhttps://patchthecve.com/cve/CVE-2017-9621.htmlWed, 17 Jun 2026 01:28:35 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in modules/Base/Lang/Administrator/update_translation.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) original or (2) new parameter.https://patchthecve.com/cve/CVE-2017-9366.htmlhttps://patchthecve.com/cve/CVE-2017-9366.htmlWed, 17 Jun 2026 01:27:58 +0000MEDIUM 4.8: Telaxus EPESI 1.8.2 and earlier has a Stored Cross-site Scripting (XSS) vulnerability in modules/Base/Dashboard/Dashboard_0.php, which allows remote attackers to inject arbitrary web script or HTML via a crafted tab_name parameter.https://patchthecve.com/cve/CVE-2017-8763.htmlhttps://patchthecve.com/cve/CVE-2017-8763.htmlWed, 17 Jun 2026 01:26:55 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in modules/Base/Box/check_for_new_version.php in EPESI in Telaxus/EPESI 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URI that lacks the cid parameter.https://patchthecve.com/cve/CVE-2017-6491.htmlhttps://patchthecve.com/cve/CVE-2017-6491.htmlWed, 17 Jun 2026 01:22:26 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (tooltip_id, callback, args, cid) passed to the EPESI-master/modules/Utils/Tooltip/req.php URL. An attacker could execute arbitrary HTML and scrhttps://patchthecve.com/cve/CVE-2017-6490.htmlhttps://patchthecve.com/cve/CVE-2017-6490.htmlWed, 17 Jun 2026 01:22:26 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (cid, value, element, mode, tab, form_name, id) passed to the EPESI-master/modules/Utils/RecordBrowser/grid.php URL. An attacker could execute ahttps://patchthecve.com/cve/CVE-2017-6489.htmlhttps://patchthecve.com/cve/CVE-2017-6489.htmlWed, 17 Jun 2026 01:22:26 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (element, state, cat, id, cid) passed to the EPESI-master/modules/Utils/Watchdog/subscribe.php URL. An attacker could execute arbitrary HTML andhttps://patchthecve.com/cve/CVE-2017-6488.htmlhttps://patchthecve.com/cve/CVE-2017-6488.htmlWed, 17 Jun 2026 01:22:26 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (visible, tab, cid) passed to the EPESI-master/modules/Utils/RecordBrowser/Filters/save_filters.php URL. An attacker could execute arbitrary HTMhttps://patchthecve.com/cve/CVE-2017-6487.htmlhttps://patchthecve.com/cve/CVE-2017-6487.htmlWed, 17 Jun 2026 01:22:26 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in EPESI 1.8.1.1. The vulnerabilities exist due to insufficient filtration of user-supplied data (state, element, id, tab, cid) passed to the "EPESI-master/modules/Utils/RecordBrowser/favorites.php" URL. An attacker could execute arbitrary H