https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-63716.htmlhttps://patchthecve.com/cve/CVE-2025-63716.htmlWed, 17 Jun 2026 09:53:25 +0000MEDIUM 6.5: The SourceCodester Leads Manager Tool v1.0 is vulnerable to Cross-Site Request Forgery (CSRF) attacks that allow unauthorized state-changing operations. The application lacks CSRF protection mechanisms such as anti-CSRF tokens or same-origin verification for critical endpoints.https://patchthecve.com/cve/CVE-2024-7942.htmlhttps://patchthecve.com/cve/CVE-2024-7942.htmlWed, 17 Jun 2026 08:21:14 +0000LOW 3.5: A vulnerability has been found in SourceCodester Leads Manager Tool 1.0 and classified as problematic. This vulnerability affects unknown code of the file update-leads.php. The manipulation of the argument phone_number leads to cross site scripting. The attack can be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2024-7644.htmlhttps://patchthecve.com/cve/CVE-2024-7644.htmlWed, 17 Jun 2026 08:20:36 +0000LOW 3.5: A vulnerability was found in SourceCodester Leads Manager Tool 1.0. It has been classified as problematic. This affects an unknown part of the file /endpoint/add-leads.php of the component Add Leads Handler. The manipulation of the argument leads_name/phone_number leads to cross site scripting. It ihttps://patchthecve.com/cve/CVE-2024-7643.htmlhttps://patchthecve.com/cve/CVE-2024-7643.htmlWed, 17 Jun 2026 08:20:36 +0000MEDIUM 6.3: A vulnerability was found in SourceCodester Leads Manager Tool 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /endpoint/delete-leads.php of the component Delete Leads Handler. The manipulation of the argument leads leads to sql injection. The attack