PatchTheCVE: readymade video sharing scripthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-17893: Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parahttps://patchthecve.com/cve/CVE-2017-17893.htmlhttps://patchthecve.com/cve/CVE-2017-17893.htmlWed, 17 Jun 2026 01:11:50 +0000MEDIUM 6.1: Readymade Video Sharing Script has XSS via the search_video.php search parameter, the viewsubs.php chnlid parameter, or the user-profile-edit.php fname parameter.CVE-2017-17892: Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.phphttps://patchthecve.com/cve/CVE-2017-17892.htmlhttps://patchthecve.com/cve/CVE-2017-17892.htmlWed, 17 Jun 2026 01:11:50 +0000CRITICAL 9.8: Readymade Video Sharing Script has SQL Injection via the viewsubs.php chnlid parameter or the search_video.php search parameter.CVE-2017-17891: Readymade Video Sharing Script has CSRF via user-profile-edit.php.https://patchthecve.com/cve/CVE-2017-17891.htmlhttps://patchthecve.com/cve/CVE-2017-17891.htmlWed, 17 Jun 2026 01:11:50 +0000HIGH 8.8: Readymade Video Sharing Script has CSRF via user-profile-edit.php.CVE-2017-17649: Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.https://patchthecve.com/cve/CVE-2017-17649.htmlhttps://patchthecve.com/cve/CVE-2017-17649.htmlWed, 17 Jun 2026 01:11:26 +0000MEDIUM 6.1: Readymade Video Sharing Script 3.2 has HTML Injection via the single-video-detail.php comment parameter.CVE-2017-17627: Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array paramhttps://patchthecve.com/cve/CVE-2017-17627.htmlhttps://patchthecve.com/cve/CVE-2017-17627.htmlWed, 17 Jun 2026 01:11:24 +0000CRITICAL 9.8: Readymade Video Sharing Script 3.2 has SQL Injection via the single-video-detail.php report_videos array parameter.