PatchTheCVE: projeqtorhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-29387: projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the componenthttps://patchthecve.com/cve/CVE-2024-29387.htmlhttps://patchthecve.com/cve/CVE-2024-29387.htmlWed, 17 Jun 2026 07:22:46 +0000HIGH 8.8: projeqtor up to 11.2.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /view/print.php.CVE-2024-29386: projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticahttps://patchthecve.com/cve/CVE-2024-29386.htmlhttps://patchthecve.com/cve/CVE-2024-29386.htmlWed, 17 Jun 2026 07:22:46 +0000MEDIUM 5.4: projeqtor up to 11.2.0 was discovered to contain a SQL injection vulnerability via the component /view/criticalResourceExport.php.CVE-2023-49034: Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary codhttps://patchthecve.com/cve/CVE-2023-49034.htmlhttps://patchthecve.com/cve/CVE-2023-49034.htmlWed, 17 Jun 2026 06:35:16 +0000MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in ProjeQtOr 11.0.2 allows a remote attacker to execute arbitrary code via a crafted script to thecheckvalidHtmlText function in the ack.php and security.php files.