PatchTheCVE: cellshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-17950: Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.https://patchthecve.com/cve/CVE-2017-17950.htmlhttps://patchthecve.com/cve/CVE-2017-17950.htmlWed, 17 Jun 2026 01:11:56 +0000HIGH 8.8: Cells Blog 3.5 has SQL Injection via the pub_readpost.php ptid parameter.CVE-2017-17949: Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.https://patchthecve.com/cve/CVE-2017-17949.htmlhttps://patchthecve.com/cve/CVE-2017-17949.htmlWed, 17 Jun 2026 01:11:56 +0000MEDIUM 6.1: Cells Blog 3.5 has XSS via the pub_readpost.php fmid parameter.CVE-2017-17948: Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.https://patchthecve.com/cve/CVE-2017-17948.htmlhttps://patchthecve.com/cve/CVE-2017-17948.htmlWed, 17 Jun 2026 01:11:56 +0000MEDIUM 6.1: Cells Blog 3.5 has XSS via the jfdname parameter in an act=showpic request.