<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: appcms</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2021-45380: AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php</title><link>https://patchthecve.com/cve/CVE-2021-45380.html</link><guid>https://patchthecve.com/cve/CVE-2021-45380.html</guid><pubDate>Wed, 17 Jun 2026 04:13:18 +0000</pubDate><description>MEDIUM 6.1: AppCMS 2.0.101 has a XSS injection vulnerability in \templates\m\inc_head.php</description></item><item><title>CVE-2020-36007: AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the</title><link>https://patchthecve.com/cve/CVE-2020-36007.html</link><guid>https://patchthecve.com/cve/CVE-2020-36007.html</guid><pubDate>Wed, 17 Jun 2026 03:14:43 +0000</pubDate><description>MEDIUM 6.1: AppCMS 2.0.101 in /admin/template/tpl_app.php has a cross site scripting attack vulnerability which allows the attacker to obtain sensitive information of other users.</description></item><item><title>CVE-2020-36006: AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delet</title><link>https://patchthecve.com/cve/CVE-2020-36006.html</link><guid>https://patchthecve.com/cve/CVE-2020-36006.html</guid><pubDate>Wed, 17 Jun 2026 03:14:43 +0000</pubDate><description>MEDIUM 6.5: AppCMS 2.0.101 in /admin/info.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.</description></item><item><title>CVE-2020-36005: AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete</title><link>https://patchthecve.com/cve/CVE-2020-36005.html</link><guid>https://patchthecve.com/cve/CVE-2020-36005.html</guid><pubDate>Wed, 17 Jun 2026 03:14:43 +0000</pubDate><description>MEDIUM 6.5: AppCMS 2.0.101 in /admin/app.php has an arbitrary file deletion vulnerability which allows attackers to delete arbitrary files on the site.</description></item><item><title>CVE-2020-36004: AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain</title><link>https://patchthecve.com/cve/CVE-2020-36004.html</link><guid>https://patchthecve.com/cve/CVE-2020-36004.html</guid><pubDate>Wed, 17 Jun 2026 03:14:42 +0000</pubDate><description>MEDIUM 6.5: AppCMS 2.0.101 in /admin/download_frame.php has a SQL injection vulnerability which allows attackers to obtain sensitive database information.</description></item></channel></rss>