PatchTheCVE: mysiteformehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-26136: A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.https://patchthecve.com/cve/CVE-2025-26136.htmlhttps://patchthecve.com/cve/CVE-2025-26136.htmlWed, 17 Jun 2026 09:01:28 +0000CRITICAL 9.8: A SQL injection vulnerability exists in mysiteforme versions prior to 2025.01.1.CVE-2024-57767: MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /filehttps://patchthecve.com/cve/CVE-2024-57767.htmlhttps://patchthecve.com/cve/CVE-2024-57767.htmlWed, 17 Jun 2026 08:14:00 +0000HIGH 8.6: MSFM before v2025.01.01 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /file/download.CVE-2024-57766: MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component syhttps://patchthecve.com/cve/CVE-2024-57766.htmlhttps://patchthecve.com/cve/CVE-2024-57766.htmlWed, 17 Jun 2026 08:14:00 +0000CRITICAL 9.1: MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/editField.CVE-2024-57765: MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at tabhttps://patchthecve.com/cve/CVE-2024-57765.htmlhttps://patchthecve.com/cve/CVE-2024-57765.htmlWed, 17 Jun 2026 08:14:00 +0000HIGH 7.5: MSFM before 2025.01.01 was discovered to contain a SQL injection vulnerability via the s_name parameter at table/list.CVE-2024-57764: MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component syhttps://patchthecve.com/cve/CVE-2024-57764.htmlhttps://patchthecve.com/cve/CVE-2024-57764.htmlWed, 17 Jun 2026 08:13:59 +0000CRITICAL 9.1: MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/add.CVE-2024-57763: MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component syhttps://patchthecve.com/cve/CVE-2024-57763.htmlhttps://patchthecve.com/cve/CVE-2024-57763.htmlWed, 17 Jun 2026 08:13:59 +0000CRITICAL 9.1: MSFM before 2025.01.01 was discovered to contain a fastjson deserialization vulnerability via the component system/table/addField.CVE-2024-57762: MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuratiohttps://patchthecve.com/cve/CVE-2024-57762.htmlhttps://patchthecve.com/cve/CVE-2024-57762.htmlWed, 17 Jun 2026 08:13:59 +0000HIGH 7.5: MSFM before v2025.01.01 was discovered to contain a deserialization vulnerability via the pom.xml configuration file.