PatchTheCVE: pixiehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-10766: Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to ihttps://patchthecve.com/cve/CVE-2019-10766.htmlhttps://patchthecve.com/cve/CVE-2019-10766.htmlWed, 17 Jun 2026 02:11:37 +0000CRITICAL 9.8: Pixie versions 1.0.x before 1.0.3, and 2.0.x before 2.0.2 allow SQL Injection in the limit() function due to improper sanitization.CVE-2017-7402: Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in anhttps://patchthecve.com/cve/CVE-2017-7402.htmlhttps://patchthecve.com/cve/CVE-2017-7402.htmlWed, 17 Jun 2026 01:24:16 +0000CRITICAL 9.8: Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg.CVE-2017-7363: Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.https://patchthecve.com/cve/CVE-2017-7363.htmlhttps://patchthecve.com/cve/CVE-2017-7363.htmlWed, 17 Jun 2026 01:24:11 +0000MEDIUM 6.1: Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack.CVE-2017-7362: Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.https://patchthecve.com/cve/CVE-2017-7362.htmlhttps://patchthecve.com/cve/CVE-2017-7362.htmlWed, 17 Jun 2026 01:24:11 +0000MEDIUM 6.1: Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.CVE-2017-7361: Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.https://patchthecve.com/cve/CVE-2017-7361.htmlhttps://patchthecve.com/cve/CVE-2017-7361.htmlWed, 17 Jun 2026 01:24:11 +0000MEDIUM 6.1: Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack.CVE-2017-7360: Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.https://patchthecve.com/cve/CVE-2017-7360.htmlhttps://patchthecve.com/cve/CVE-2017-7360.htmlWed, 17 Jun 2026 01:24:11 +0000MEDIUM 6.1: Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.CVE-2017-7359: Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.https://patchthecve.com/cve/CVE-2017-7359.htmlhttps://patchthecve.com/cve/CVE-2017-7359.htmlWed, 17 Jun 2026 01:24:11 +0000MEDIUM 6.1: Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.