https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-15187.htmlhttps://patchthecve.com/cve/CVE-2025-15187.htmlTue, 13 Oct 2026 09:10:00 +0000LOW 3.8: A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of the component File Handler. Performing a manipulation of the argument sqlFiles/zipFiles results in path traversal. The attack can be initiated remotely. The exploit has been made puhttps://patchthecve.com/cve/CVE-2025-14244.htmlhttps://patchthecve.com/cve/CVE-2025-14244.htmlThu, 15 Oct 2026 19:10:00 +0000LOW 2.4: A flaw has been found in GreenCMS 2.3.0603. Affected by this issue is some unknown functionality of the file /Admin/Controller/CustomController.class.php of the component Menu Management Page. This manipulation of the argument Link causes cross site scripting. The attack may be initiated remotely. Thttps://patchthecve.com/cve/CVE-2025-9415.htmlhttps://patchthecve.com/cve/CVE-2025-9415.htmlWed, 17 Jun 2026 10:08:55 +0000MEDIUM 6.3: A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload[] leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available ahttps://patchthecve.com/cve/CVE-2024-22570.htmlhttps://patchthecve.com/cve/CVE-2024-22570.htmlWed, 17 Jun 2026 07:11:34 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in /install.php?m=install&c=index&a=step3 of GreenCMS v2.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.