https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-8876.htmlhttps://patchthecve.com/cve/CVE-2024-8876.htmlWed, 17 Jun 2026 08:23:28 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, has been found in xiaohe4966 TpMeCMS up to 1.3.3.1. Affected by this issue is some unknown functionality of the file /index/ajax/lang. The manipulation of the argument lang leads to path traversal. The attack may be launched remotely. The exploithttps://patchthecve.com/cve/CVE-2024-44684.htmlhttps://patchthecve.com/cve/CVE-2024-44684.htmlWed, 17 Jun 2026 07:53:01 +0000MEDIUM 6.1: TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields.https://patchthecve.com/cve/CVE-2024-7900.htmlhttps://patchthecve.com/cve/CVE-2024-7900.htmlWed, 17 Jun 2026 08:21:08 +0000LOW 2.4: A vulnerability, which was classified as problematic, was found in xiaohe4966 TpMeCMS 1.3.3.2. Affected is an unknown function of the file /h.php/general/config?ref=addtabs of the component Basic Configuration Handler. The manipulation of the argument Site Name/Beian/Contact address/copyright/techni