PatchTheCVE: harajhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-31299: Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade https://patchthecve.com/cve/CVE-2022-31299.htmlhttps://patchthecve.com/cve/CVE-2022-31299.htmlWed, 17 Jun 2026 04:45:17 +0000MEDIUM 6.1: Haraj v3.7 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the User Upgrade Form.CVE-2022-31301: Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads componehttps://patchthecve.com/cve/CVE-2022-31301.htmlhttps://patchthecve.com/cve/CVE-2022-31301.htmlWed, 17 Jun 2026 04:45:17 +0000MEDIUM 5.4: Haraj v3.7 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the Post Ads component.CVE-2022-31298: A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbihttps://patchthecve.com/cve/CVE-2022-31298.htmlhttps://patchthecve.com/cve/CVE-2022-31298.htmlWed, 17 Jun 2026 04:45:17 +0000MEDIUM 5.4: A cross-site scripting vulnerability in the ads comment section of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.CVE-2022-31300: A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbhttps://patchthecve.com/cve/CVE-2022-31300.htmlhttps://patchthecve.com/cve/CVE-2022-31300.htmlWed, 17 Jun 2026 04:45:17 +0000MEDIUM 5.4: A cross-site scripting vulnerability in the DM Section component of Haraj v3.7 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request.