https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3024.htmlhttps://patchthecve.com/cve/CVE-2026-3024.htmlWed, 17 Jun 2026 10:42:54 +0000MEDIUM 5.4: Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/configuracion/agenda/modelo-formulario-evento'. A user with permission to create personalized accounts could exploit this vulnerability simply by creating a malicious survey thttps://patchthecve.com/cve/CVE-2026-3023.htmlhttps://patchthecve.com/cve/CVE-2026-3023.htmlWed, 17 Jun 2026 10:42:54 +0000HIGH 8.8: Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting NoSQL commands, allowihttps://patchthecve.com/cve/CVE-2026-3022.htmlhttps://patchthecve.com/cve/CVE-2026-3022.htmlWed, 17 Jun 2026 10:42:53 +0000MEDIUM 6.5: Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose ofhttps://patchthecve.com/cve/CVE-2026-3021.htmlhttps://patchthecve.com/cve/CVE-2026-3021.htmlWed, 17 Jun 2026 10:42:53 +0000MEDIUM 6.5: Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'. This vulnerability could allow an authenticated user to alter a GET request to the affected endpoint for the purpose of injecting special NoSQL co