https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-24249.htmlhttps://patchthecve.com/cve/CVE-2023-24249.htmlWed, 17 Jun 2026 05:38:56 +0000HIGH 7.2: An arbitrary file upload vulnerability in laravel-admin v1.8.19 allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-38089.htmlhttps://patchthecve.com/cve/CVE-2022-38089.htmlWed, 17 Jun 2026 04:56:05 +0000MEDIUM 5.4: Stored cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary scrhttps://patchthecve.com/cve/CVE-2022-38080.htmlhttps://patchthecve.com/cve/CVE-2022-38080.htmlWed, 17 Jun 2026 04:56:03 +0000MEDIUM 5.4: Reflected cross-site scripting vulnerability in Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows a remote authenticated attacker to inject an arbitrary https://patchthecve.com/cve/CVE-2022-37333.htmlhttps://patchthecve.com/cve/CVE-2022-37333.htmlWed, 17 Jun 2026 04:54:53 +0000HIGH 8.8: SQL injection vulnerability in the Exment ((PHP8) exceedone/exment v5.0.2 and earlier and exceedone/laravel-admin v3.0.0 and earlier, (PHP7) exceedone/exment v4.4.2 and earlier and exceedone/laravel-admin v2.2.2 and earlier) allows remote authenticated attackers to execute arbitrary SQL commands.