PatchTheCVE: cityposthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2005-4672: Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allhttps://patchthecve.com/cve/CVE-2005-4672.htmlhttps://patchthecve.com/cve/CVE-2005-4672.htmlTue, 16 Jun 2026 22:19:13 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in image-editor-52/index.php in CityPost Simple Image-Editor 0.52 allows remote attackers to inject arbitrary web script or HTML via the (1) m1, (2) m2, (3) m3, (4) imgsrc, and (5) m4 parameter.CVE-2005-4671: Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remohttps://patchthecve.com/cve/CVE-2005-4671.htmlhttps://patchthecve.com/cve/CVE-2005-4671.htmlTue, 16 Jun 2026 22:19:13 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in simple-upload-53.php in CityPost Simple PHP Upload 5.3 allows remote attackers to inject arbitrary web script or HTML via the message parameter.CVE-2005-4670: Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remohttps://patchthecve.com/cve/CVE-2005-4670.htmlhttps://patchthecve.com/cve/CVE-2005-4670.htmlTue, 16 Jun 2026 22:19:12 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in message.php in CityPost Automated Link Exchange (LNKX) allows remote attackers to inject arbitrary web script or HTML via the msg parameter.