PatchTheCVE: i-mcs nfvhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-28803: Cross-site scripting (XSS) vulnerability in Italtel S.p.Ahttps://patchthecve.com/cve/CVE-2024-28803.htmlhttps://patchthecve.com/cve/CVE-2024-28803.htmlWed, 17 Jun 2026 07:21:48 +0000MEDIUM 6.1: Cross-site scripting (XSS) vulnerability in Italtel S.p.A. i-MCS NFV v.12.1.0-20211215 allows unauthenticated remote attackers to inject arbitrary web script or HTML into HTTP/POST parameterCVE-2024-28806: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215https://patchthecve.com/cve/CVE-2024-28806.htmlhttps://patchthecve.com/cve/CVE-2024-28806.htmlWed, 17 Jun 2026 07:21:49 +0000HIGH 7.5: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Remote unauthenticated attackers can upload files at an arbitrary path.CVE-2024-28805: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215https://patchthecve.com/cve/CVE-2024-28805.htmlhttps://patchthecve.com/cve/CVE-2024-28805.htmlWed, 17 Jun 2026 07:21:48 +0000CRITICAL 9.1: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. There is Incorrect Access Control.CVE-2024-28804: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215https://patchthecve.com/cve/CVE-2024-28804.htmlhttps://patchthecve.com/cve/CVE-2024-28804.htmlWed, 17 Jun 2026 07:21:48 +0000HIGH 7.1: An issue was discovered in Italtel i-MCS NFV 12.1.0-20211215. Stored Cross-site scripting (XSS) can occur via POST.