https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-3267.htmlhttps://patchthecve.com/cve/CVE-2021-3267.htmlWed, 17 Jun 2026 04:04:52 +0000HIGH 7.2: File Upload vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the uploadFile function.https://patchthecve.com/cve/CVE-2021-31707.htmlhttps://patchthecve.com/cve/CVE-2021-31707.htmlWed, 17 Jun 2026 03:52:10 +0000CRITICAL 9.8: Permissions vulnerability found in KiteCMS allows a remote attacker to execute arbitrary code via the upload file type.https://patchthecve.com/cve/CVE-2020-20522.htmlhttps://patchthecve.com/cve/CVE-2020-20522.htmlWed, 17 Jun 2026 03:03:02 +0000MEDIUM 6.1: Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the registering user parameter.https://patchthecve.com/cve/CVE-2020-20521.htmlhttps://patchthecve.com/cve/CVE-2020-20521.htmlWed, 17 Jun 2026 03:03:02 +0000MEDIUM 6.1: Cross Site Scripting vulnerability found in KiteCMS v.1.1 allows a remote attacker to execute arbitrary code via the comment parameter.https://patchthecve.com/cve/CVE-2021-36546.htmlhttps://patchthecve.com/cve/CVE-2021-36546.htmlWed, 17 Jun 2026 03:58:55 +0000HIGH 7.5: Incorrect Access Control issue discovered in KiteCMS 1.1 allows remote attackers to view sensitive information via path in application URL.https://patchthecve.com/cve/CVE-2022-28445.htmlhttps://patchthecve.com/cve/CVE-2022-28445.htmlWed, 17 Jun 2026 04:38:33 +0000MEDIUM 6.5: KiteCMS v1.1.1 was discovered to contain an arbitrary file read vulnerability via the background management module.