https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1557.htmlhttps://patchthecve.com/cve/CVE-2025-1557.htmlWed, 17 Jun 2026 08:39:21 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in OFCMS 1.1.3. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2024-48236.htmlhttps://patchthecve.com/cve/CVE-2024-48236.htmlWed, 17 Jun 2026 07:58:20 +0000MEDIUM 6.5: An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the FileOutputStream function in the write String method of the ofcms-admin\src\main\java\com\ofsoft\cms\core\uitle\FileUtils.java filehttps://patchthecve.com/cve/CVE-2024-48235.htmlhttps://patchthecve.com/cve/CVE-2024-48235.htmlWed, 17 Jun 2026 07:58:20 +0000MEDIUM 6.5: An issue in ofcms 1.1.2 allows a remote attacker to execute arbitrary code via the save method of the TemplateController.java file.https://patchthecve.com/cve/CVE-2024-9411.htmlhttps://patchthecve.com/cve/CVE-2024-9411.htmlWed, 17 Jun 2026 08:24:31 +0000LOW 3.5: A vulnerability classified as problematic has been found in OFCMS 1.1.2. This affects the function add of the file /admin/system/dict/add.json?sqlid=system.dict.save. The manipulation of the argument dict_value leads to cross site scripting. It is possible to initiate the attack remotely. The exploi