https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-10289.htmlhttps://patchthecve.com/cve/CVE-2024-10289.htmlWed, 17 Jun 2026 06:55:20 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ManageSubscription, parameter MSubListName.https://patchthecve.com/cve/CVE-2024-10288.htmlhttps://patchthecve.com/cve/CVE-2024-10288.htmlWed, 17 Jun 2026 06:55:20 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/SubscribeToList, parameter ListName.https://patchthecve.com/cve/CVE-2024-10287.htmlhttps://patchthecve.com/cve/CVE-2024-10287.htmlWed, 17 Jun 2026 06:55:20 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /mlss/ForgotPassword, parameter ListName.https://patchthecve.com/cve/CVE-2024-10286.htmlhttps://patchthecve.com/cve/CVE-2024-10286.htmlWed, 17 Jun 2026 06:55:20 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability affecting LocalServer 1.0.9 that could allow a remote user to send a specially crafted query to an authenticated user and steal their session details through /testmail/index.php, parameter to.