https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1892.htmlhttps://patchthecve.com/cve/CVE-2025-1892.htmlWed, 17 Jun 2026 08:40:16 +0000LOW 2.4: A vulnerability was found in shishuocms 1.1. It has been classified as problematic. Affected is an unknown function of the file /manage/folder/add.json of the component Directory Deletion Page. The manipulation of the argument folderName leads to cross site scripting. It is possible to launch the athttps://patchthecve.com/cve/CVE-2025-1891.htmlhttps://patchthecve.com/cve/CVE-2025-1891.htmlWed, 17 Jun 2026 08:40:16 +0000MEDIUM 4.3: A vulnerability was found in shishuocms 1.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.https://patchthecve.com/cve/CVE-2025-1890.htmlhttps://patchthecve.com/cve/CVE-2025-1890.htmlWed, 17 Jun 2026 08:40:16 +0000MEDIUM 6.3: A vulnerability has been found in shishuocms 1.1 and classified as critical. This vulnerability affects the function handleRequest of the file src/main/java/com/shishuo/cms/action/manage/ManageUpLoadAction.java. The manipulation of the argument file leads to unrestricted upload. The attack can be in