PatchTheCVE: hkcmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-5013: A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702https://patchthecve.com/cve/CVE-2025-5013.htmlhttps://patchthecve.com/cve/CVE-2025-5013.htmlWed, 17 Jun 2026 09:47:01 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack reCVE-2025-25761: HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenterhttps://patchthecve.com/cve/CVE-2025-25761.htmlhttps://patchthecve.com/cve/CVE-2025-25761.htmlWed, 17 Jun 2026 09:01:09 +0000HIGH 7.2: HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php.CVE-2024-52677: HkCms <= v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.phhttps://patchthecve.com/cve/CVE-2024-52677.htmlhttps://patchthecve.com/cve/CVE-2024-52677.htmlWed, 17 Jun 2026 08:07:33 +0000CRITICAL 9.8: HkCms <= v2.3.2.240702 is vulnerable to file upload in the getFileName method in /app/common/library/Upload.php.