PatchTheCVE: xoonipshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-5664: Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to executehttps://patchthecve.com/cve/CVE-2020-5664.htmlhttps://patchthecve.com/cve/CVE-2020-5664.htmlWed, 17 Jun 2026 03:22:03 +0000CRITICAL 9.8: Deserialization of untrusted data vulnerability in XooNIps 3.49 and earlier allows remote attackers to execute arbitrary code via unspecified vectors.CVE-2020-5663: Stored cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers tohttps://patchthecve.com/cve/CVE-2020-5663.htmlhttps://patchthecve.com/cve/CVE-2020-5663.htmlWed, 17 Jun 2026 03:22:03 +0000MEDIUM 5.4: Stored cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors.CVE-2020-5662: Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackershttps://patchthecve.com/cve/CVE-2020-5662.htmlhttps://patchthecve.com/cve/CVE-2020-5662.htmlWed, 17 Jun 2026 03:22:03 +0000MEDIUM 5.4: Reflected cross-site scripting vulnerability in XooNIps 3.49 and earlier allows remote authenticated attackers to inject arbitrary script via unspecified vectors.CVE-2020-5659: SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute ahttps://patchthecve.com/cve/CVE-2020-5659.htmlhttps://patchthecve.com/cve/CVE-2020-5659.htmlWed, 17 Jun 2026 03:22:03 +0000HIGH 8.8: SQL injection vulnerability in the XooNIps 3.49 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2020-5625: Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary https://patchthecve.com/cve/CVE-2020-5625.htmlhttps://patchthecve.com/cve/CVE-2020-5625.htmlWed, 17 Jun 2026 03:21:42 +0000MEDIUM 6.1: Cross-site scripting vulnerability in XooNIps 3.48 and earlier allows remote attackers to inject an arbitrary script via unspecified vectors.CVE-2020-5624: SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL chttps://patchthecve.com/cve/CVE-2020-5624.htmlhttps://patchthecve.com/cve/CVE-2020-5624.htmlWed, 17 Jun 2026 03:21:42 +0000CRITICAL 9.8: SQL injection vulnerability in the XooNIps 3.48 and earlier allows remote attackers to execute arbitrary SQL commands via unspecified vectors.CVE-2014-1968: Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackhttps://patchthecve.com/cve/CVE-2014-1968.htmlhttps://patchthecve.com/cve/CVE-2014-1968.htmlWed, 17 Jun 2026 00:05:49 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the XooNIps module 3.47 and earlier for XOOPS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.