PatchTheCVE: destoonhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-18433: An issue was discovered in DESTOON B2B 7.0https://patchthecve.com/cve/CVE-2018-18433.htmlhttps://patchthecve.com/cve/CVE-2018-18433.htmlWed, 17 Jun 2026 01:47:17 +0000MEDIUM 4.8: An issue was discovered in DESTOON B2B 7.0. admin/category.inc.php has XSS via the category[catname] parameter to the admin.php URI.CVE-2018-18432: An issue was discovered in DESTOON B2B 7.0https://patchthecve.com/cve/CVE-2018-18432.htmlhttps://patchthecve.com/cve/CVE-2018-18432.htmlWed, 17 Jun 2026 01:47:17 +0000HIGH 8.8: An issue was discovered in DESTOON B2B 7.0. CSRF exists via the admin.php URI in an action=add request.CVE-2018-18431: An issue was discovered in DESTOON B2B 7.0https://patchthecve.com/cve/CVE-2018-18431.htmlhttps://patchthecve.com/cve/CVE-2018-18431.htmlWed, 17 Jun 2026 01:47:17 +0000MEDIUM 4.8: An issue was discovered in DESTOON B2B 7.0. XSS exists via certain text boxes to the admin.php?moduleid=2&action=add URI.CVE-2018-18430: An issue was discovered in DESTOON B2B 7.0https://patchthecve.com/cve/CVE-2018-18430.htmlhttps://patchthecve.com/cve/CVE-2018-18430.htmlWed, 17 Jun 2026 01:47:17 +0000MEDIUM 4.8: An issue was discovered in DESTOON B2B 7.0. admin\setting.inc.php has XSS via the first text box to the admin.php URI.