https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-12231.htmlhttps://patchthecve.com/cve/CVE-2025-12231.htmlThu, 08 Oct 2026 11:10:00 +0000LOW 2.4: A security vulnerability has been detected in projectworlds Expense Management System 1.0. Affected is an unknown function of the file /public/admin/expense_categories/create of the component Expense Categories Page. Such manipulation leads to cross site scripting. It is possible to launch the attachttps://patchthecve.com/cve/CVE-2025-12230.htmlhttps://patchthecve.com/cve/CVE-2025-12230.htmlThu, 08 Oct 2026 11:10:00 +0000LOW 2.4: A weakness has been identified in projectworlds Expense Management System 1.0. This impacts an unknown function of the file /public/admin/currencies/create of the component Currency Page. This manipulation causes cross site scripting. It is possible to initiate the attack remotely. The exploit has bhttps://patchthecve.com/cve/CVE-2025-12229.htmlhttps://patchthecve.com/cve/CVE-2025-12229.htmlThu, 08 Oct 2026 11:10:00 +0000LOW 2.4: A security flaw has been discovered in projectworlds Expense Management System 1.0. This affects an unknown function of the file /public/admin/roles/create of the component Roles Page. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been relhttps://patchthecve.com/cve/CVE-2025-12228.htmlhttps://patchthecve.com/cve/CVE-2025-12228.htmlThu, 08 Oct 2026 11:10:00 +0000LOW 2.4: A vulnerability was identified in projectworlds Expense Management System 1.0. The impacted element is an unknown function of the file /public/admin/users/create of the component Users Page. The manipulation leads to cross site scripting. The attack is possible to be carried out remotely. The exploihttps://patchthecve.com/cve/CVE-2025-6478.htmlhttps://patchthecve.com/cve/CVE-2025-6478.htmlWed, 17 Jun 2026 10:01:58 +0000MEDIUM 4.3: A vulnerability was found in CodeAstro Expense Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely.https://patchthecve.com/cve/CVE-2024-1031.htmlhttps://patchthecve.com/cve/CVE-2024-1031.htmlWed, 17 Jun 2026 07:03:17 +0000LOW 3.5: A vulnerability was found in CodeAstro Expense Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file templates/5-Add-Expenses.php of the component Add Expenses Page. The manipulation of the argument item leads to cross site scripting. The att