https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-0338.htmlhttps://patchthecve.com/cve/CVE-2023-0338.htmlWed, 17 Jun 2026 05:25:19 +0000MEDIUM 6.1: Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.https://patchthecve.com/cve/CVE-2023-0337.htmlhttps://patchthecve.com/cve/CVE-2023-0337.htmlWed, 17 Jun 2026 05:25:19 +0000MEDIUM 6.1: Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch.https://patchthecve.com/cve/CVE-2023-0048.htmlhttps://patchthecve.com/cve/CVE-2023-0048.htmlWed, 17 Jun 2026 05:24:39 +0000HIGH 8.8: Code Injection in GitHub repository lirantal/daloradius prior to master-branch.https://patchthecve.com/cve/CVE-2023-0046.htmlhttps://patchthecve.com/cve/CVE-2023-0046.htmlWed, 17 Jun 2026 05:24:39 +0000HIGH 7.2: Improper Restriction of Names for Files and Other Resources in GitHub repository lirantal/daloradius prior to master-branch.https://patchthecve.com/cve/CVE-2022-4630.htmlhttps://patchthecve.com/cve/CVE-2022-4630.htmlWed, 17 Jun 2026 05:21:24 +0000MEDIUM 5.3: Sensitive Cookie Without 'HttpOnly' Flag in GitHub repository lirantal/daloradius prior to master.https://patchthecve.com/cve/CVE-2022-4366.htmlhttps://patchthecve.com/cve/CVE-2022-4366.htmlWed, 17 Jun 2026 05:20:42 +0000HIGH 7.5: Missing Authorization in GitHub repository lirantal/daloradius prior to master branch.https://patchthecve.com/cve/CVE-2022-23475.htmlhttps://patchthecve.com/cve/CVE-2022-23475.htmlWed, 17 Jun 2026 04:30:11 +0000HIGH 8.8: daloRADIUS is an open source RADIUS web management application. daloRadius 1.3 and prior are vulnerable to a combination cross site scripting (XSS) and cross site request forgery (CSRF) vulnerability which leads to account takeover in the mng-del.php file because of an unescaped variable reflected i