https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-30886.htmlhttps://patchthecve.com/cve/CVE-2024-30886.htmlWed, 17 Jun 2026 07:27:28 +0000MEDIUM 5.4: A stored cross-site scripting (XSS) vulnerability in the remotelink function of HadSky v7.6.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the url parameter.https://patchthecve.com/cve/CVE-2024-30885.htmlhttps://patchthecve.com/cve/CVE-2024-30885.htmlWed, 17 Jun 2026 07:27:28 +0000MEDIUM 6.1: Reflected Cross-Site Scripting (XSS) vulnerability in HadSky v7.6.3, allows remote attackers to execute arbitrary code and obtain sensitive information via the chklogin.php component .https://patchthecve.com/cve/CVE-2023-46428.htmlhttps://patchthecve.com/cve/CVE-2023-46428.htmlWed, 17 Jun 2026 06:30:52 +0000HIGH 8.8: An arbitrary file upload vulnerability in HadSky v7.12.10 allows attackers to execute arbitrary code via a crafted file.https://patchthecve.com/cve/CVE-2023-3579.htmlhttps://patchthecve.com/cve/CVE-2023-3579.htmlWed, 17 Jun 2026 06:14:23 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, has been found in HadSky 7.11.8. Affected by this issue is some unknown functionality of the component User Handler. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the