https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-0891.htmlhttps://patchthecve.com/cve/CVE-2024-0891.htmlWed, 17 Jun 2026 06:54:30 +0000LOW 3.5: A vulnerability was found in hongmaple octopus 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality. The manipulation of the argument description with the input <script>alert(document.cookie)</script> leads to cross site scripting. The attack can be lahttps://patchthecve.com/cve/CVE-2024-0890.htmlhttps://patchthecve.com/cve/CVE-2024-0890.htmlWed, 17 Jun 2026 06:54:30 +0000MEDIUM 6.3: A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to thhttps://patchthecve.com/cve/CVE-2024-0784.htmlhttps://patchthecve.com/cve/CVE-2024-0784.htmlWed, 17 Jun 2026 06:54:16 +0000MEDIUM 6.3: A vulnerability was found in hongmaple octopus 1.0. It has been classified as critical. Affected is an unknown function of the file /system/role/list. The manipulation of the argument dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th