https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-53274.htmlhttps://patchthecve.com/cve/CVE-2024-53274.htmlWed, 17 Jun 2026 08:08:44 +0000MEDIUM 6.1: Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `home.vue` containsa reflected XSS vulnerability due to an incorrect sanitization function. An attacker can specify a malicious `redirectTo` paramehttps://patchthecve.com/cve/CVE-2024-53273.htmlhttps://patchthecve.com/cve/CVE-2024-53273.htmlWed, 17 Jun 2026 08:08:44 +0000MEDIUM 6.1: Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `register` function in `RegisterLoginReset.vue` contains a reflected XSS vulnerability due to an incorrect sanitization function. An attacker can specify a malicious `redhttps://patchthecve.com/cve/CVE-2024-53272.htmlhttps://patchthecve.com/cve/CVE-2024-53272.htmlWed, 17 Jun 2026 08:08:43 +0000MEDIUM 6.1: Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The `login` and `social media` function in `RegisterLoginReset.vue` contains two reflected XSS vulnerabilities due to an incorrect sanitization function. An attacker can spec