https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-24131.htmlhttps://patchthecve.com/cve/CVE-2024-24131.htmlWed, 17 Jun 2026 07:14:08 +0000MEDIUM 6.1: SuperWebMailer v9.31.0.01799 was discovered to contain a reflected cross-site scripting (XSS) vulenrability via the component api.php.https://patchthecve.com/cve/CVE-2023-38194.htmlhttps://patchthecve.com/cve/CVE-2023-38194.htmlWed, 17 Jun 2026 06:09:38 +0000MEDIUM 6.1: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows keepalive.php XSS via a GET parameter.https://patchthecve.com/cve/CVE-2023-38193.htmlhttps://patchthecve.com/cve/CVE-2023-38193.htmlWed, 17 Jun 2026 06:09:38 +0000HIGH 8.8: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Remote Code Execution via a crafted sendmail command line.https://patchthecve.com/cve/CVE-2023-38192.htmlhttps://patchthecve.com/cve/CVE-2023-38192.htmlWed, 17 Jun 2026 06:09:37 +0000MEDIUM 6.1: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows superadmincreate.php XSS via crafted incorrect passwords.https://patchthecve.com/cve/CVE-2023-38190.htmlhttps://patchthecve.com/cve/CVE-2023-38190.htmlWed, 17 Jun 2026 06:09:37 +0000HIGH 8.8: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows Export SQL Injection via the size parameter.https://patchthecve.com/cve/CVE-2023-38191.htmlhttps://patchthecve.com/cve/CVE-2023-38191.htmlWed, 17 Jun 2026 06:09:37 +0000MEDIUM 6.1: An issue was discovered in SuperWebMailer 9.00.0.01710. It allows spamtest_external.php XSS via a crafted filename.