https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3593.htmlhttps://patchthecve.com/cve/CVE-2025-3593.htmlWed, 17 Jun 2026 09:20:16 +0000MEDIUM 6.3: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. Thhttps://patchthecve.com/cve/CVE-2025-3592.htmlhttps://patchthecve.com/cve/CVE-2025-3592.htmlWed, 17 Jun 2026 09:20:15 +0000LOW 3.5: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/v1/link/edit. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosedhttps://patchthecve.com/cve/CVE-2025-3591.htmlhttps://patchthecve.com/cve/CVE-2025-3591.htmlWed, 17 Jun 2026 09:20:15 +0000LOW 3.5: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/v1/blog/edit. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been discl