https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-48257.htmlhttps://patchthecve.com/cve/CVE-2024-48257.htmlWed, 17 Jun 2026 07:58:22 +0000CRITICAL 9.8: Wavelog 1.8.5 allows Oqrs_model.php get_worked_modes station_id SQL injectioin.https://patchthecve.com/cve/CVE-2024-48251.htmlhttps://patchthecve.com/cve/CVE-2024-48251.htmlWed, 17 Jun 2026 07:58:21 +0000CRITICAL 9.8: Wavelog 1.8.5 allows Activated_gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode.https://patchthecve.com/cve/CVE-2024-48249.htmlhttps://patchthecve.com/cve/CVE-2024-48249.htmlWed, 17 Jun 2026 07:58:21 +0000HIGH 7.3: Wavelog 1.8.5 allows Gridmap_model.php get_band_confirmed SQL injection via band, sat, propagation, or mode.https://patchthecve.com/cve/CVE-2024-8521.htmlhttps://patchthecve.com/cve/CVE-2024-8521.htmlWed, 17 Jun 2026 08:22:47 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in Wavelog up to 1.8.0. Affected is the function index of the file /qso of the component Live QSO. The manipulation of the argument manual leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been