https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-55417.htmlhttps://patchthecve.com/cve/CVE-2024-55417.htmlWed, 17 Jun 2026 08:11:07 +0000MEDIUM 4.3: DevDojo Voyager through version 1.8.0 is vulnerable to bypassing the file type verification when an authenticated user uploads a file via /admin/media/upload. An authenticated user can upload a web shell causing arbitrary code execution on the server.https://patchthecve.com/cve/CVE-2024-55416.htmlhttps://patchthecve.com/cve/CVE-2024-55416.htmlWed, 17 Jun 2026 08:11:07 +0000LOW 3.5: DevDojo Voyager through version 1.8.0 is vulnerable to reflected XSS via /admin/compass. By manipulating an authenticated user to click on a link, arbitrary Javascript can be executed.https://patchthecve.com/cve/CVE-2024-55415.htmlhttps://patchthecve.com/cve/CVE-2024-55415.htmlWed, 17 Jun 2026 08:11:07 +0000MEDIUM 5.7: DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass.