https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-36545.htmlhttps://patchthecve.com/cve/CVE-2021-36545.htmlWed, 17 Jun 2026 03:58:55 +0000MEDIUM 5.4: Cross Site Scripting (XSS) vulnerability in tpcms 3.2 allows remote attackers to run arbitrary code via the cfg_copyright or cfg_tel field in Site Configuration page.https://patchthecve.com/cve/CVE-2021-36544.htmlhttps://patchthecve.com/cve/CVE-2021-36544.htmlWed, 17 Jun 2026 03:58:54 +0000HIGH 7.5: Incorrect Access Control issue discovered in tpcms 3.2 allows remote attackers to view sensitive information via path in application URL.https://patchthecve.com/cve/CVE-2022-29624.htmlhttps://patchthecve.com/cve/CVE-2022-29624.htmlWed, 17 Jun 2026 04:40:31 +0000HIGH 8.8: An arbitrary file upload vulnerability in the Add File function of TPCMS v3.2 allows attackers to execute arbitrary code via a crafted PHP file.