https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-24788.htmlhttps://patchthecve.com/cve/CVE-2023-24788.htmlWed, 17 Jun 2026 05:39:52 +0000HIGH 8.8: NotrinosERP v0.7 was discovered to contain a SQL injection vulnerability via the OrderNumber parameter at /NotrinosERP/sales/customer_delivery.php.https://patchthecve.com/cve/CVE-2022-2965.htmlhttps://patchthecve.com/cve/CVE-2022-2965.htmlWed, 17 Jun 2026 04:42:53 +0000MEDIUM 4.3: Improper Restriction of Rendered UI Layers or Frames in GitHub repository notrinos/notrinoserp prior to 0.7.https://patchthecve.com/cve/CVE-2022-2927.htmlhttps://patchthecve.com/cve/CVE-2022-2927.htmlWed, 17 Jun 2026 04:42:50 +0000CRITICAL 9.8: Weak Password Requirements in GitHub repository notrinos/notrinoserp prior to 0.7.https://patchthecve.com/cve/CVE-2022-2921.htmlhttps://patchthecve.com/cve/CVE-2022-2921.htmlWed, 17 Jun 2026 04:42:49 +0000HIGH 8.8: Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository notrinos/notrinoserp prior to v0.7. This results in privilege escalation to a system administrator account. An attacker can gain access to protected functionality such as create/update companies, install/update lahttps://patchthecve.com/cve/CVE-2022-2871.htmlhttps://patchthecve.com/cve/CVE-2022-2871.htmlWed, 17 Jun 2026 04:42:44 +0000MEDIUM 5.4: Cross-site Scripting (XSS) - Stored in GitHub repository notrinos/notrinoserp prior to 0.7.