https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3533.htmlhttps://patchthecve.com/cve/CVE-2025-3533.htmlWed, 17 Jun 2026 09:20:07 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admin/Default/Channel/index.html.Attackers. The manipulation of the argument Parent leads to cross site scripting. The attack may be initiated rehttps://patchthecve.com/cve/CVE-2025-3532.htmlhttps://patchthecve.com/cve/CVE-2025-3532.htmlWed, 17 Jun 2026 09:20:07 +0000MEDIUM 4.3: A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/index.html.Attackers. The manipulation of the argument OrderNumber leads to cross site scripting. The attack can be initiated remotely. The explhttps://patchthecve.com/cve/CVE-2025-3531.htmlhttps://patchthecve.com/cve/CVE-2025-3531.htmlWed, 17 Jun 2026 09:20:07 +0000MEDIUM 4.3: A vulnerability classified as problematic has been found in YouDianCMS 9.5.21. This affects an unknown part of the file /App/Tpl/Admin/Default/Log/index.html. The manipulation of the argument UserName/LogType leads to cross site scripting. It is possible to initiate the attack remotely. The exploit https://patchthecve.com/cve/CVE-2024-57052.htmlhttps://patchthecve.com/cve/CVE-2024-57052.htmlWed, 17 Jun 2026 08:13:14 +0000CRITICAL 9.8: An issue in youdiancms v.9.5.20 and before allows a remote attacker to escalate privileges via the sessionID parameter in the index.php file.https://patchthecve.com/cve/CVE-2024-7330.htmlhttps://patchthecve.com/cve/CVE-2024-7330.htmlWed, 17 Jun 2026 08:19:52 +0000MEDIUM 6.3: A vulnerability has been found in YouDianCMS 7 and classified as critical. Affected by this vulnerability is the function curl_exec of the file /App/Core/Extend/Function/ydLib.php. The manipulation of the argument url leads to server-side request forgery. The attack can be launched remotely. The exphttps://patchthecve.com/cve/CVE-2024-7329.htmlhttps://patchthecve.com/cve/CVE-2024-7329.htmlWed, 17 Jun 2026 08:19:52 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in YouDianCMS 7. Affected is an unknown function of the file /Public/ckeditor/plugins/multiimage/dialogs/image_upload.php. The manipulation of the argument files leads to unrestricted upload. It is possible to launch the attack remotely. Thttps://patchthecve.com/cve/CVE-2024-7328.htmlhttps://patchthecve.com/cve/CVE-2024-7328.htmlWed, 17 Jun 2026 08:19:52 +0000MEDIUM 5.3: A vulnerability, which was classified as problematic, has been found in YouDianCMS 7. This issue affects some unknown processing of the file /t.php?action=phpinfo. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and