https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-21252.htmlhttps://patchthecve.com/cve/CVE-2020-21252.htmlWed, 17 Jun 2026 03:03:37 +0000HIGH 8.8: Cross Site Request Forgery vulnerability in Neeke HongCMS 3.0.0 allows a remote attacker to execute arbitrary code and escalate privileges via the updateusers parameter.https://patchthecve.com/cve/CVE-2020-21643.htmlhttps://patchthecve.com/cve/CVE-2020-21643.htmlWed, 17 Jun 2026 03:03:49 +0000MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in HongCMS 3.0 allows attackers to run arbitrary code via the callback parameter to /ajax/myshop.https://patchthecve.com/cve/CVE-2022-32412.htmlhttps://patchthecve.com/cve/CVE-2022-32412.htmlWed, 17 Jun 2026 04:47:15 +0000HIGH 7.2: An issue in the /template/edit component of HongCMS v3.0 allows attackers to getshell.https://patchthecve.com/cve/CVE-2022-32411.htmlhttps://patchthecve.com/cve/CVE-2022-32411.htmlWed, 17 Jun 2026 04:47:15 +0000HIGH 7.2: An issue in the languages config file of HongCMS v3.0 allows attackers to getshell.