https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-10397.htmlhttps://patchthecve.com/cve/CVE-2025-10397.htmlWed, 17 Jun 2026 08:28:14 +0000MEDIUM 4.7: A vulnerability was identified in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Handler. The manipulation of the argument cjurl leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used.https://patchthecve.com/cve/CVE-2025-10395.htmlhttps://patchthecve.com/cve/CVE-2025-10395.htmlWed, 17 Jun 2026 08:28:14 +0000MEDIUM 4.7: A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible to initiate the attack remotely.https://patchthecve.com/cve/CVE-2025-10122.htmlhttps://patchthecve.com/cve/CVE-2025-10122.htmlMon, 19 Oct 2026 17:10:00 +0000MEDIUM 4.7: A vulnerability was found in Maccms10 2025.1000.4050. Affected is the function rep of the file application/admin/controller/Database.php. Performing manipulation of the argument where results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.https://patchthecve.com/cve/CVE-2025-45474.htmlhttps://patchthecve.com/cve/CVE-2025-45474.htmlWed, 17 Jun 2026 09:25:32 +0000HIGH 7.3: maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings.https://patchthecve.com/cve/CVE-2025-45475.htmlhttps://patchthecve.com/cve/CVE-2025-45475.htmlWed, 17 Jun 2026 09:25:32 +0000MEDIUM 5.4: maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management.https://patchthecve.com/cve/CVE-2025-28091.htmlhttps://patchthecve.com/cve/CVE-2025-28091.htmlWed, 17 Jun 2026 09:04:33 +0000CRITICAL 9.1: maccms10 v2025.1000.4047 has a Server-Side Request Forgery (SSRF) vulnerability via Add Article.https://patchthecve.com/cve/CVE-2025-28090.htmlhttps://patchthecve.com/cve/CVE-2025-28090.htmlWed, 17 Jun 2026 09:04:32 +0000CRITICAL 9.1: maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) in the Collection Custom Interface feature.https://patchthecve.com/cve/CVE-2025-28089.htmlhttps://patchthecve.com/cve/CVE-2025-28089.htmlWed, 17 Jun 2026 09:04:32 +0000CRITICAL 9.1: maccms10 v2025.1000.4047 is vulnerable to Server-Side Request Forgery (SSRF) via the Scheduled Task function.https://patchthecve.com/cve/CVE-2024-46654.htmlhttps://patchthecve.com/cve/CVE-2024-46654.htmlWed, 17 Jun 2026 07:55:40 +0000MEDIUM 4.8: A stored cross-site scripting (XSS) vulnerability in the Add Scheduled Task module of Maccms10 v2024.1000.4040 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.https://patchthecve.com/cve/CVE-2024-32391.htmlhttps://patchthecve.com/cve/CVE-2024-32391.htmlWed, 17 Jun 2026 07:29:35 +0000HIGH 7.3: Cross Site Scripting vulnerability in MacCMS v.10 v.2024.1000.3000 allows a remote attacker to execute arbitrary code via a crafted payload.