https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-22390.htmlhttps://patchthecve.com/cve/CVE-2025-22390.htmlWed, 17 Jun 2026 08:46:59 +0000HIGH 7.5: An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS due to insufficient enforcement of password complexity requirements. The application permits users to set passwords with a minimum length of 6 characters, lacking adequate complhttps://patchthecve.com/cve/CVE-2025-22389.htmlhttps://patchthecve.com/cve/CVE-2025-22389.htmlWed, 17 Jun 2026 08:46:58 +0000HIGH 8.0: An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not properly validate uploaded files. This allows the upload of potentially malicious file types, including .docm .html. When accessed by applicationhttps://patchthecve.com/cve/CVE-2025-22388.htmlhttps://patchthecve.com/cve/CVE-2025-22388.htmlWed, 17 Jun 2026 08:46:58 +0000MEDIUM 5.7: An issue was discovered in Optimizely EPiServer.CMS.Core before 12.22.0. A high-severity Stored Cross-Site Scripting (XSS) vulnerability exists in the CMS, allowing malicious actors to inject and execute arbitrary JavaScript code, potentially compromising user data, escalating privileges, or executi