https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-33085.htmlhttps://patchthecve.com/cve/CVE-2022-33085.htmlWed, 17 Jun 2026 04:48:26 +0000HIGH 7.2: ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename function at \espcms_public\espcms_templates\ESPCMS_Templates.https://patchthecve.com/cve/CVE-2020-20125.htmlhttps://patchthecve.com/cve/CVE-2020-20125.htmlWed, 17 Jun 2026 03:02:50 +0000MEDIUM 6.1: EARCLINK ESPCMS-P8 contains a cross-site scripting (XSS) vulnerability in espcms_web\espcms_load.php.https://patchthecve.com/cve/CVE-2020-18913.htmlhttps://patchthecve.com/cve/CVE-2020-18913.htmlWed, 17 Jun 2026 02:59:31 +0000HIGH 7.5: EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcms_web/Search.php component via the attr_array parameter. This vulnerability allows attackers to access sensitive database information.