<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: cusg</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2023-48987: Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 a</title><link>https://patchthecve.com/cve/CVE-2023-48987.html</link><guid>https://patchthecve.com/cve/CVE-2023-48987.html</guid><pubDate>Wed, 17 Jun 2026 06:35:13 +0000</pubDate><description>HIGH 7.5: Blind SQL Injection vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the pages.php component.</description></item><item><title>CVE-2023-48986: Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v</title><link>https://patchthecve.com/cve/CVE-2023-48986.html</link><guid>https://patchthecve.com/cve/CVE-2023-48986.html</guid><pubDate>Wed, 17 Jun 2026 06:35:13 +0000</pubDate><description>MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the users.php component.</description></item><item><title>CVE-2023-48985: Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v</title><link>https://patchthecve.com/cve/CVE-2023-48985.html</link><guid>https://patchthecve.com/cve/CVE-2023-48985.html</guid><pubDate>Wed, 17 Jun 2026 06:35:13 +0000</pubDate><description>MEDIUM 6.1: Cross Site Scripting (XSS) vulnerability in CU Solutions Group (CUSG) Content Management System (CMS) before v.7.75 allows a remote attacker to execute arbitrary code, escalate privileges, and obtain sensitive information via a crafted script to the login.php component.</description></item></channel></rss>