https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-17569.htmlhttps://patchthecve.com/cve/CVE-2017-17569.htmlWed, 17 Jun 2026 01:11:16 +0000MEDIUM 6.1: Scubez Posty Readymade Classifieds has XSS via the admin/user_activate_submit.php ID parameter.https://patchthecve.com/cve/CVE-2017-17568.htmlhttps://patchthecve.com/cve/CVE-2017-17568.htmlWed, 17 Jun 2026 01:11:16 +0000HIGH 7.5: Scubez Posty Readymade Classifieds has Incorrect Access Control for visiting admin/user_activate_submit.php (aka the backend PHP script), which might allow remote attackers to obtain sensitive information via a direct request.https://patchthecve.com/cve/CVE-2017-17567.htmlhttps://patchthecve.com/cve/CVE-2017-17567.htmlWed, 17 Jun 2026 01:11:16 +0000HIGH 7.5: Scubez Posty Readymade Classifieds has SQL Injection via the admin/user_activate_submit.php ID parameter.https://patchthecve.com/cve/CVE-2017-17111.htmlhttps://patchthecve.com/cve/CVE-2017-17111.htmlWed, 17 Jun 2026 01:10:21 +0000CRITICAL 9.8: Posty Readymade Classifieds Script 1.0 allows an attacker to inject SQL commands via a listings.php?catid= or ads-details.php?ID= request.