https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-60917.htmlhttps://patchthecve.com/cve/CVE-2025-60917.htmlWed, 17 Jun 2026 09:50:11 +0000MEDIUM 4.6: A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the color parameter.https://patchthecve.com/cve/CVE-2025-60916.htmlhttps://patchthecve.com/cve/CVE-2025-60916.htmlWed, 17 Jun 2026 09:50:11 +0000MEDIUM 5.4: A reflected cross-site scripting (XSS) vulnerability in the /overview/network/ endpoint of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload into the charge parameter.https://patchthecve.com/cve/CVE-2025-60915.htmlhttps://patchthecve.com/cve/CVE-2025-60915.htmlWed, 17 Jun 2026 09:50:11 +0000HIGH 8.1: An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversal via a crafted request.https://patchthecve.com/cve/CVE-2025-60914.htmlhttps://patchthecve.com/cve/CVE-2025-60914.htmlWed, 17 Jun 2026 09:50:11 +0000MEDIUM 4.6: Incorrect access control in Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to access sensitive information via sending a crafted GET request to the /display_logo endpoint.https://patchthecve.com/cve/CVE-2025-56423.htmlhttps://patchthecve.com/cve/CVE-2025-56423.htmlWed, 17 Jun 2026 09:42:35 +0000MEDIUM 5.3: An issue in Austrian Academy of Sciences (AW) Austrian Archaeological Institute OpenAtlas v.8.12.0 allows a remote attacker to obtain sensitive information via the login error messageshttps://patchthecve.com/cve/CVE-2025-40709.htmlhttps://patchthecve.com/cve/CVE-2025-40709.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 5.4: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an https://patchthecve.com/cve/CVE-2025-40708.htmlhttps://patchthecve.com/cve/CVE-2025-40708.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 5.4: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an https://patchthecve.com/cve/CVE-2025-40707.htmlhttps://patchthecve.com/cve/CVE-2025-40707.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 5.4: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an https://patchthecve.com/cve/CVE-2025-40706.htmlhttps://patchthecve.com/cve/CVE-2025-40706.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 5.4: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an https://patchthecve.com/cve/CVE-2025-40705.htmlhttps://patchthecve.com/cve/CVE-2025-40705.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 5.4: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an https://patchthecve.com/cve/CVE-2025-40704.htmlhttps://patchthecve.com/cve/CVE-2025-40704.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 5.4: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an https://patchthecve.com/cve/CVE-2025-40703.htmlhttps://patchthecve.com/cve/CVE-2025-40703.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 5.4: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an https://patchthecve.com/cve/CVE-2025-40702.htmlhttps://patchthecve.com/cve/CVE-2025-40702.htmlSun, 18 Oct 2026 21:10:00 +0000MEDIUM 5.4: Cross-Site Scripting (XSS) vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage (ACDH-CH), due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an https://patchthecve.com/cve/CVE-2025-51535.htmlhttps://patchthecve.com/cve/CVE-2025-51535.htmlWed, 17 Jun 2026 09:35:40 +0000CRITICAL 9.1: Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a SQL injection vulnerability.https://patchthecve.com/cve/CVE-2025-51534.htmlhttps://patchthecve.com/cve/CVE-2025-51534.htmlWed, 17 Jun 2026 09:35:40 +0000HIGH 8.1: A cross-site scripting (XSS) vulnerability in Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name field.https://patchthecve.com/cve/CVE-2025-51536.htmlhttps://patchthecve.com/cve/CVE-2025-51536.htmlWed, 17 Jun 2026 09:35:40 +0000CRITICAL 9.8: Austrian Archaeological Institute (AI) OpenAtlas v8.11.0 as discovered to contain a hardcoded Administrator password.