https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-20721.htmlhttps://patchthecve.com/cve/CVE-2021-20721.htmlWed, 17 Jun 2026 03:34:19 +0000CRITICAL 9.8: KonaWiki2 versions prior to 2.2.4 allows a remote attacker to upload arbitrary files via unspecified vectors. If the file contains PHP scripts, arbitrary code may be executed.https://patchthecve.com/cve/CVE-2021-20720.htmlhttps://patchthecve.com/cve/CVE-2021-20720.htmlWed, 17 Jun 2026 03:34:19 +0000CRITICAL 9.8: SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors.https://patchthecve.com/cve/CVE-2020-5614.htmlhttps://patchthecve.com/cve/CVE-2020-5614.htmlWed, 17 Jun 2026 03:21:41 +0000MEDIUM 5.3: Directory traversal vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors.https://patchthecve.com/cve/CVE-2020-5613.htmlhttps://patchthecve.com/cve/CVE-2020-5613.htmlWed, 17 Jun 2026 03:21:41 +0000MEDIUM 6.1: Cross-site scripting vulnerability in KonaWiki 3.1.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.https://patchthecve.com/cve/CVE-2020-5612.htmlhttps://patchthecve.com/cve/CVE-2020-5612.htmlWed, 17 Jun 2026 03:21:41 +0000MEDIUM 6.1: Cross-site scripting vulnerability in KonaWiki 2.2.0 and earlier allows remote attackers to execute an arbitrary script via a specially crafted URL.