https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-70958.htmlhttps://patchthecve.com/cve/CVE-2025-70958.htmlWed, 17 Jun 2026 10:03:28 +0000MEDIUM 6.1: Multiple reflected cross-site scripting (XSS) vulnerabilities in the installation module of Subrion CMS v4.2.1 allows attackers to execute arbitrary Javascript in the context of the user's browser via injecting a crafted payload into the dbuser, dbpwd, and dbname parameters.https://patchthecve.com/cve/CVE-2025-56556.htmlhttps://patchthecve.com/cve/CVE-2025-56556.htmlWed, 17 Jun 2026 09:42:40 +0000LOW 3.8: An issue was discovered in Subrion CMS 4.2.1, allowing authenticated adminitrators or moderators with access to the built-in Run SQL Query feature under the SQL Tool admin panel - to gain escalated privileges in the context of the SQL query tool.https://patchthecve.com/cve/CVE-2024-25399.htmlhttps://patchthecve.com/cve/CVE-2024-25399.htmlWed, 17 Jun 2026 07:15:58 +0000MEDIUM 6.1: Subrion CMS 4.2.1 is vulnerable to Cross Site Scripting (XSS) via adminer.php.