PatchTheCVE: generic content management systemhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-20590: Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.phhttps://patchthecve.com/cve/CVE-2018-20590.htmlhttps://patchthecve.com/cve/CVE-2018-20590.htmlWed, 17 Jun 2026 01:53:08 +0000MEDIUM 4.8: Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/users.php user ID.CVE-2018-20589: Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_picthttps://patchthecve.com/cve/CVE-2018-20589.htmlhttps://patchthecve.com/cve/CVE-2018-20589.htmlWed, 17 Jun 2026 01:53:08 +0000MEDIUM 4.8: Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID.CVE-2018-20569: user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injectionhttps://patchthecve.com/cve/CVE-2018-20569.htmlhttps://patchthecve.com/cve/CVE-2018-20569.htmlWed, 17 Jun 2026 01:53:06 +0000CRITICAL 9.8: user/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.CVE-2018-20568: Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL https://patchthecve.com/cve/CVE-2018-20568.htmlhttps://patchthecve.com/cve/CVE-2018-20568.htmlWed, 17 Jun 2026 01:53:06 +0000CRITICAL 9.8: Administrator/index.php in Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 allows SQL injection for authentication bypass.