PatchTheCVE: ximdexhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-12273: The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.https://patchthecve.com/cve/CVE-2018-12273.htmlhttps://patchthecve.com/cve/CVE-2018-12273.htmlWed, 17 Jun 2026 01:37:29 +0000MEDIUM 6.1: The /edit URI in the DMS component in Ximdex 4.0 has XSS via the Ciudad or Nombre parameter.CVE-2018-12272: xowl/request.php in Ximdex 4.0 has XSS via the content parameter.https://patchthecve.com/cve/CVE-2018-12272.htmlhttps://patchthecve.com/cve/CVE-2018-12272.htmlWed, 17 Jun 2026 01:37:29 +0000MEDIUM 6.1: xowl/request.php in Ximdex 4.0 has XSS via the content parameter.CVE-2018-12047: xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonshttps://patchthecve.com/cve/CVE-2018-12047.htmlhttps://patchthecve.com/cve/CVE-2018-12047.htmlWed, 17 Jun 2026 01:37:03 +0000MEDIUM 6.1: xfind/search in Ximdex 4.0 has XSS via the filter[n][value] parameters for non-negative values of n, as demonstrated by n equal to 0 through 12.CVE-2018-11735: index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.https://patchthecve.com/cve/CVE-2018-11735.htmlhttps://patchthecve.com/cve/CVE-2018-11735.htmlWed, 17 Jun 2026 01:36:29 +0000MEDIUM 6.1: index.php?action=createaccount in Ximdex 4.0 has XSS via the sname or fname parameter.