https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-25220.htmlhttps://patchthecve.com/cve/CVE-2022-25220.htmlWed, 17 Jun 2026 04:33:13 +0000MEDIUM 4.8: PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code inside the markdown descriptions while creating a product, report or finding.https://patchthecve.com/cve/CVE-2022-23052.htmlhttps://patchthecve.com/cve/CVE-2022-23052.htmlWed, 17 Jun 2026 04:29:25 +0000MEDIUM 6.5: PeteReport Version 0.5 contains a Cross Site Request Forgery (CSRF) vulnerability allowing an attacker to trick users into deleting users, products, reports and findings on the application.https://patchthecve.com/cve/CVE-2022-23051.htmlhttps://patchthecve.com/cve/CVE-2022-23051.htmlWed, 17 Jun 2026 04:29:25 +0000MEDIUM 5.4: PeteReport Version 0.5 allows an authenticated admin user to inject persistent JavaScript code while adding an 'Attack Tree' by modifying the 'svg_file' parameter.