https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-22987.htmlhttps://patchthecve.com/cve/CVE-2020-22987.htmlThu, 09 Jul 2026 00:16:58 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the fileToUpload parameter to the uploadFile task.https://patchthecve.com/cve/CVE-2020-22986.htmlhttps://patchthecve.com/cve/CVE-2020-22986.htmlThu, 09 Jul 2026 00:16:58 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the searchString parameter to the wikiScrapper task.https://patchthecve.com/cve/CVE-2020-22985.htmlhttps://patchthecve.com/cve/CVE-2020-22985.htmlThu, 09 Jul 2026 00:16:58 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via the key parameter to the getESRIExtraConfig task.https://patchthecve.com/cve/CVE-2020-22984.htmlhttps://patchthecve.com/cve/CVE-2020-22984.htmlThu, 09 Jul 2026 00:16:58 +0000MEDIUM 6.1: Cross-Site Scripting (XSS) vulnerability in MicroStrategy Web SDK 10.11 and earlier, allows remote unauthenticated attackers to execute arbitrary code via key parameter to the getGoogleExtraConfig task.