https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-23467.htmlhttps://patchthecve.com/cve/CVE-2023-23467.htmlWed, 17 Jun 2026 05:37:12 +0000HIGH 8.1: Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint.https://patchthecve.com/cve/CVE-2023-23466.htmlhttps://patchthecve.com/cve/CVE-2023-23466.htmlWed, 17 Jun 2026 05:37:12 +0000MEDIUM 6.5: Media CP Media Control Panel latest version. Insufficiently protected credential change.https://patchthecve.com/cve/CVE-2023-23465.htmlhttps://patchthecve.com/cve/CVE-2023-23465.htmlWed, 17 Jun 2026 05:37:12 +0000CRITICAL 9.1: Media CP Media Control Panel latest version. CSRF possible through unspecified endpoint.https://patchthecve.com/cve/CVE-2023-23464.htmlhttps://patchthecve.com/cve/CVE-2023-23464.htmlWed, 17 Jun 2026 05:37:12 +0000HIGH 8.1: Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.