https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-55198.htmlhttps://patchthecve.com/cve/CVE-2024-55198.htmlWed, 17 Jun 2026 08:11:00 +0000MEDIUM 5.3: User Enumeration via Discrepancies in Error Messages in the Celk Sistemas Celk Saude v.3.1.252.1 password recovery functionality which allows a remote attacker to enumerate users through discrepancies in the responses.https://patchthecve.com/cve/CVE-2024-55199.htmlhttps://patchthecve.com/cve/CVE-2024-55199.htmlWed, 17 Jun 2026 08:11:01 +0000MEDIUM 5.4: A Stored Cross Site Scripting (XSS) vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to store JavaScript code inside a PDF file through the file upload feature. When the file is rendered, the injected code is executed on the user's browser.https://patchthecve.com/cve/CVE-2024-51182.htmlhttps://patchthecve.com/cve/CVE-2024-51182.htmlWed, 17 Jun 2026 08:05:29 +0000MEDIUM 6.1: HTML Injection vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary HTML code via the "erro" parameter.https://patchthecve.com/cve/CVE-2024-48761.htmlhttps://patchthecve.com/cve/CVE-2024-48761.htmlWed, 17 Jun 2026 07:58:44 +0000HIGH 8.8: Reflected XSS vulnerability in Celk Sistemas Celk Saude v.3.1.252.1 allows a remote attacker to inject arbitrary JavaScript code via the "erro" parameter.