https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-47828.htmlhttps://patchthecve.com/cve/CVE-2024-47828.htmlWed, 17 Jun 2026 07:57:49 +0000MEDIUM 5.3: ampache is a web based audio/video streaming application and file manager. A CSRF attack can be performed in order to delete objects (Playlist, smartlist etc.). Cross-Site Request Forgery (CSRF) is an attack that forces authenticated users to submit a request to a Web application against which they https://patchthecve.com/cve/CVE-2024-47184.htmlhttps://patchthecve.com/cve/CVE-2024-47184.htmlWed, 17 Jun 2026 07:56:41 +0000MEDIUM 6.1: Ampache is a web based audio/video streaming application and file manager. Prior to version 6.6.0, the Democratic Playlist Name is vulnerable to a stored cross-site scripting. Version 6.6.0 fixes this issue.https://patchthecve.com/cve/CVE-2024-41665.htmlhttps://patchthecve.com/cve/CVE-2024-41665.htmlWed, 17 Jun 2026 07:48:00 +0000MEDIUM 5.5: Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting (XSS) vulnerability in versions prior to 6.6.0. This vulnerability exists in the "Playlists - Democratic - Configure Democratic Playlist" feature. An attacker with Content Manager permissions chttps://patchthecve.com/cve/CVE-2024-28853.htmlhttps://patchthecve.com/cve/CVE-2024-28853.htmlWed, 17 Jun 2026 07:21:53 +0000LOW 3.9: Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting (XSS) vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of /preferences.php?action=admin_update_preferenhttps://patchthecve.com/cve/CVE-2024-28852.htmlhttps://patchthecve.com/cve/CVE-2024-28852.htmlWed, 17 Jun 2026 07:21:53 +0000MEDIUM 6.1: Ampache is a web based audio/video streaming application and file manager. Ampache has multiple reflective XSS vulnerabilities,this means that all forms in the Ampache that use `rule` as a variable are not secure. For example, when querying a song, when querying a podcast, we need to use `$rule` varhttps://patchthecve.com/cve/CVE-2023-0606.htmlhttps://patchthecve.com/cve/CVE-2023-0606.htmlWed, 28 Oct 2026 19:10:00 +0000MEDIUM 6.1: Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.