https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-31679.htmlhttps://patchthecve.com/cve/CVE-2021-31679.htmlWed, 17 Jun 2026 03:52:09 +0000MEDIUM 6.5: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that allows attackers to delete admin and other members' account numbers.https://patchthecve.com/cve/CVE-2021-31678.htmlhttps://patchthecve.com/cve/CVE-2021-31678.htmlWed, 17 Jun 2026 03:52:08 +0000MEDIUM 6.5: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can delete import information about a user's company.https://patchthecve.com/cve/CVE-2021-31677.htmlhttps://patchthecve.com/cve/CVE-2021-31677.htmlWed, 17 Jun 2026 03:52:08 +0000MEDIUM 6.5: An issue was discovered in PESCMS-V2.3.3. There is a CSRF vulnerability that can modify admin and other members' passwords.https://patchthecve.com/cve/CVE-2021-31676.htmlhttps://patchthecve.com/cve/CVE-2021-31676.htmlWed, 17 Jun 2026 03:52:08 +0000MEDIUM 6.1: A reflected XSS was discovered in PESCMS-V2.3.3. When combined with CSRF in the same file, they can cause bigger destruction.https://patchthecve.com/cve/CVE-2020-28092.htmlhttps://patchthecve.com/cve/CVE-2020-28092.htmlWed, 17 Jun 2026 03:10:06 +0000MEDIUM 6.1: PESCMS Team 2.3.2 has multiple reflected XSS via the id parameter:?g=Team&m=Task&a=my&status=3&id=,?g=Team&m=Task&a=my&status=0&id=,?g=Team&m=Task&a=my&status=1&id=,?g=Team&m=Task&a=my&status=10&id=