PatchTheCVE: opensidhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-13040: OpenSID 18.06-pasca has a CSRF vulnerabilityhttps://patchthecve.com/cve/CVE-2018-13040.htmlhttps://patchthecve.com/cve/CVE-2018-13040.htmlWed, 17 Jun 2026 01:38:44 +0000HIGH 8.8: OpenSID 18.06-pasca has a CSRF vulnerability. This vulnerability can add an account (at the admin level) via the index.php/man_user/insert URI.CVE-2018-13039: OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS) via the cari parameter, aka an index.php/first?cahttps://patchthecve.com/cve/CVE-2018-13039.htmlhttps://patchthecve.com/cve/CVE-2018-13039.htmlWed, 17 Jun 2026 01:38:44 +0000MEDIUM 6.1: OpenSID 18.06-pasca has reflected Cross Site Scripting (XSS) via the cari parameter, aka an index.php/first?cari= URI.CVE-2018-13038: OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article fehttps://patchthecve.com/cve/CVE-2018-13038.htmlhttps://patchthecve.com/cve/CVE-2018-13038.htmlWed, 17 Jun 2026 01:38:44 +0000CRITICAL 9.8: OpenSID 18.06-pasca has an Unrestricted File Upload vulnerability via an Attachment Document in the article feature. This vulnerability leads to uploading arbitrary PHP code via a .php filename with the application/pdf Content-Type.