https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-35370.htmlhttps://patchthecve.com/cve/CVE-2021-35370.htmlWed, 17 Jun 2026 03:57:28 +0000CRITICAL 9.8: An issue found in Peacexie Imcat v5.4 allows attackers to execute arbitrary code via the incomplete filtering function.https://patchthecve.com/cve/CVE-2021-35369.htmlhttps://patchthecve.com/cve/CVE-2021-35369.htmlWed, 17 Jun 2026 03:57:27 +0000MEDIUM 6.5: Arbitrary File Read vulnerability found in Peacexie ImCat v.5.2 fixed in v.5.4 allows attackers to obtain sensitive information via the filtering_get_contents function.https://patchthecve.com/cve/CVE-2021-36444.htmlhttps://patchthecve.com/cve/CVE-2021-36444.htmlWed, 17 Jun 2026 03:58:51 +0000HIGH 8.8: Cross Site Request Forgery (CSRF) vulnerability in imcat 5.4 allows remote attackers to gain escalated privileges via flaws one time token generation on the add administrator page.https://patchthecve.com/cve/CVE-2021-36443.htmlhttps://patchthecve.com/cve/CVE-2021-36443.htmlWed, 17 Jun 2026 03:58:51 +0000HIGH 8.8: Cross Site Request Forgery vulnerability in imcat 5.4 allows remote attackers to escalate privilege via lack of token verification.