https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-33396.htmlhttps://patchthecve.com/cve/CVE-2021-33396.htmlWed, 17 Jun 2026 03:54:32 +0000MEDIUM 6.5: Cross Site Request Forgery (CSRF) vulnerability in baijiacms 4.1.4, allows attackers to change the password or other information of an arbitrary account via index.php.https://patchthecve.com/cve/CVE-2022-45942.htmlhttps://patchthecve.com/cve/CVE-2022-45942.htmlWed, 17 Jun 2026 05:11:03 +0000HIGH 8.8: A Remote Code Execution (RCE) vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4.https://patchthecve.com/cve/CVE-2022-38931.htmlhttps://patchthecve.com/cve/CVE-2022-38931.htmlWed, 17 Jun 2026 04:57:19 +0000HIGH 8.8: A Server-Side Request Forgery (SSRF) in fetch_net_file_upload function of baijiacmsV4 v4.1.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the url parameter.https://patchthecve.com/cve/CVE-2022-35150.htmlhttps://patchthecve.com/cve/CVE-2022-35150.htmlWed, 17 Jun 2026 04:51:30 +0000CRITICAL 9.8: Baijicms v4 was discovered to contain an arbitrary file upload vulnerability.