<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: bumsys project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-2832:  SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.</title><link>https://patchthecve.com/cve/CVE-2023-2832.html</link><guid>https://patchthecve.com/cve/CVE-2023-2832.html</guid><pubDate>Wed, 17 Jun 2026 05:53:34 +0000</pubDate><description>HIGH 7.2:  SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.</description></item><item><title>CVE-2023-2554: External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.</title><link>https://patchthecve.com/cve/CVE-2023-2554.html</link><guid>https://patchthecve.com/cve/CVE-2023-2554.html</guid><pubDate>Wed, 17 Jun 2026 05:52:49 +0000</pubDate><description>HIGH 7.2: External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.</description></item><item><title>CVE-2023-2553: Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.</title><link>https://patchthecve.com/cve/CVE-2023-2553.html</link><guid>https://patchthecve.com/cve/CVE-2023-2553.html</guid><pubDate>Wed, 17 Jun 2026 05:52:49 +0000</pubDate><description>MEDIUM 5.4: Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.</description></item><item><title>CVE-2023-2552: Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.</title><link>https://patchthecve.com/cve/CVE-2023-2552.html</link><guid>https://patchthecve.com/cve/CVE-2023-2552.html</guid><pubDate>Wed, 17 Jun 2026 05:52:49 +0000</pubDate><description>HIGH 8.8: Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.</description></item><item><title>CVE-2023-2551: PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.</title><link>https://patchthecve.com/cve/CVE-2023-2551.html</link><guid>https://patchthecve.com/cve/CVE-2023-2551.html</guid><pubDate>Wed, 17 Jun 2026 05:52:49 +0000</pubDate><description>HIGH 8.8: PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.</description></item><item><title>CVE-2023-1362: Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.</title><link>https://patchthecve.com/cve/CVE-2023-1362.html</link><guid>https://patchthecve.com/cve/CVE-2023-1362.html</guid><pubDate>Wed, 17 Jun 2026 05:27:46 +0000</pubDate><description>MEDIUM 6.1: Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.</description></item><item><title>CVE-2023-1361: SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.</title><link>https://patchthecve.com/cve/CVE-2023-1361.html</link><guid>https://patchthecve.com/cve/CVE-2023-1361.html</guid><pubDate>Wed, 17 Jun 2026 05:27:46 +0000</pubDate><description>MEDIUM 6.5: SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.</description></item><item><title>CVE-2023-0455: Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.</title><link>https://patchthecve.com/cve/CVE-2023-0455.html</link><guid>https://patchthecve.com/cve/CVE-2023-0455.html</guid><pubDate>Wed, 17 Jun 2026 05:25:35 +0000</pubDate><description>HIGH 8.8: Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.</description></item></channel></rss>