https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-30148.htmlhttps://patchthecve.com/cve/CVE-2025-30148.htmlWed, 17 Jun 2026 09:08:15 +0000MEDIUM 5.4: Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the CMS could send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payloadhttps://patchthecve.com/cve/CVE-2024-13919.htmlhttps://patchthecve.com/cve/CVE-2024-13919.htmlWed, 17 Jun 2026 07:02:59 +0000HIGH 8.0: The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of route parameters in the debug-mode error page.https://patchthecve.com/cve/CVE-2024-13918.htmlhttps://patchthecve.com/cve/CVE-2024-13918.htmlWed, 17 Jun 2026 07:02:59 +0000HIGH 8.0: The Laravel framework versions between 11.9.0 and 11.35.1 are susceptible to reflected cross-site scripting due to an improper encoding of request parameters in the debug-mode error page.https://patchthecve.com/cve/CVE-2025-27515.htmlhttps://patchthecve.com/cve/CVE-2025-27515.htmlWed, 17 Jun 2026 09:03:44 +0000CRITICAL 9.8: Laravel is a web application framework. When using wildcard validation to validate a given file or image field (`files.*`), a user-crafted malicious request could potentially bypass the validation rules. This vulnerability is fixed in 11.44.1 and 12.1.1.https://patchthecve.com/cve/CVE-2024-53277.htmlhttps://patchthecve.com/cve/CVE-2024-53277.htmlWed, 17 Jun 2026 08:08:44 +0000MEDIUM 5.4: Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. In some cases, form messages can contain HTML markup. This is an intentional feature, allowing links and other relevant HTML markup for the given message. Some form messages include content that the user can provide. There https://patchthecve.com/cve/CVE-2024-52301.htmlhttps://patchthecve.com/cve/CVE-2024-52301.htmlWed, 17 Jun 2026 08:06:58 +0000HIGH 7.5: Laravel is a web application framework. When the register_argc_argv php directive is set to on , and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request. The vulnerability fixed in 6.20.45, 7.30.7, 8.83.28, 9https://patchthecve.com/cve/CVE-2024-9443.htmlhttps://patchthecve.com/cve/CVE-2024-9443.htmlWed, 17 Jun 2026 08:24:34 +0000MEDIUM 6.4: The Basticom Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and abovehttps://patchthecve.com/cve/CVE-2024-32981.htmlhttps://patchthecve.com/cve/CVE-2024-32981.htmlWed, 17 Jun 2026 07:30:48 +0000MEDIUM 5.4: Silverstripe framework is the PHP framework forming the base for the Silverstripe CMS. In affected versions a bad actor with access to edit content in the CMS could add send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of t