https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3398.htmlhttps://patchthecve.com/cve/CVE-2025-3398.htmlWed, 17 Jun 2026 09:19:52 +0000MEDIUM 6.3: A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java. The manipulation leads to improper access controls. The attack can be launched remotely. https://patchthecve.com/cve/CVE-2025-2364.htmlhttps://patchthecve.com/cve/CVE-2025-2364.htmlWed, 17 Jun 2026 09:06:50 +0000LOW 3.5: A vulnerability classified as problematic was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function addNewArticle of the file blogserver/src/main/java/org/sang/service/ArticleService.java. The manipulation of the argument mdContent/htmlContent leads to cross site scriptinghttps://patchthecve.com/cve/CVE-2025-2363.htmlhttps://patchthecve.com/cve/CVE-2025-2363.htmlWed, 17 Jun 2026 09:06:50 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in lenve VBlog up to 1.0.0. Affected is the function uploadImg of the file blogserver/src/main/java/org/sang/controller/ArticleController.java. The manipulation of the argument filename leads to path traversal. It is possible to launch the attack