https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-46097.htmlhttps://patchthecve.com/cve/CVE-2024-46097.htmlWed, 17 Jun 2026 07:55:11 +0000HIGH 8.1: TestLink 1.9.20 is vulnerable to Incorrect Access Control in the TestPlan editing section. When a new TestPlan is created, an ID with an incremental value is automatically generated. Using the edit function you can change the tplan_id parameter to another ID. The application does not carry out a chehttps://patchthecve.com/cve/CVE-2024-42906.htmlhttps://patchthecve.com/cve/CVE-2024-42906.htmlWed, 17 Jun 2026 07:50:06 +0000MEDIUM 6.1: TestLink before v.1.9.20 is vulnerable to Cross Site Scripting (XSS) via the pop-up on upload file. When uploading a file, the XSS payload can be entered into the file name.https://patchthecve.com/cve/CVE-2023-50110.htmlhttps://patchthecve.com/cve/CVE-2023-50110.htmlWed, 17 Jun 2026 06:39:10 +0000HIGH 7.5: TestLink through 1.9.20 allows type juggling for authentication bypass because === is not used.