https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3043.htmlhttps://patchthecve.com/cve/CVE-2026-3043.htmlWed, 17 Jun 2026 10:42:55 +0000MEDIUM 4.3: A flaw has been found in itsourcecode Event Management System 1.0. The impacted element is an unknown function of the file /admin/navbar.php. Executing a manipulation of the argument page can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and mahttps://patchthecve.com/cve/CVE-2026-3042.htmlhttps://patchthecve.com/cve/CVE-2026-3042.htmlWed, 17 Jun 2026 10:42:55 +0000HIGH 7.3: A vulnerability was detected in itsourcecode Event Management System 1.0. The affected element is an unknown function of the file /admin/index.php. Performing a manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit is now public and https://patchthecve.com/cve/CVE-2025-56243.htmlhttps://patchthecve.com/cve/CVE-2025-56243.htmlWed, 17 Jun 2026 09:42:28 +0000MEDIUM 6.1: A Cross-Site Scripting (XSS) vulnerability was found in the register.php page of PuneethReddyHC Event Management System 1.0, where the event_id GET parameter is improperly handled. An attacker can craft a malicious URL to execute arbitrary JavaScript in the victim s browser by injecting code into thhttps://patchthecve.com/cve/CVE-2024-13007.htmlhttps://patchthecve.com/cve/CVE-2024-13007.htmlWed, 17 Jun 2026 07:00:57 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Codezips Event Management System 1.0. Affected is an unknown function of the file /contact.php. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed https://patchthecve.com/cve/CVE-2024-44728.htmlhttps://patchthecve.com/cve/CVE-2024-44728.htmlWed, 17 Jun 2026 07:53:03 +0000MEDIUM 6.1: Sourcecodehero Event Management System 1.0 allows Stored Cross-Site Scripting via parameters Full Name, Address, Email, and contact# in /clientdetails/admin/regester.php.https://patchthecve.com/cve/CVE-2024-44727.htmlhttps://patchthecve.com/cve/CVE-2024-44727.htmlWed, 17 Jun 2026 07:53:03 +0000CRITICAL 9.8: Sourcecodehero Event Management System1.0 is vulnerable to SQL Injection via the parameter 'username' in /event/admin/login.php.