<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dhcms project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-28527: dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/Ad</title><link>https://patchthecve.com/cve/CVE-2022-28527.html</link><guid>https://patchthecve.com/cve/CVE-2022-28527.html</guid><pubDate>Wed, 17 Jun 2026 04:38:37 +0000</pubDate><description>HIGH 8.1: dhcms v20170919 was discovered to contain an arbitrary folder deletion vulnerability via /admin.php?r=admin/AdminBackup/del.</description></item><item><title>CVE-2020-19275: An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the </title><link>https://patchthecve.com/cve/CVE-2020-19275.html</link><guid>https://patchthecve.com/cve/CVE-2020-19275.html</guid><pubDate>Wed, 17 Jun 2026 02:59:41 +0000</pubDate><description>MEDIUM 5.3: An Information Disclosure vulnerability exists in dhcms 2017-09-18 when entering invalid characters after the normal interface, which causes an error that will leak the physical path.</description></item><item><title>CVE-2020-19274: A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, whic</title><link>https://patchthecve.com/cve/CVE-2020-19274.html</link><guid>https://patchthecve.com/cve/CVE-2020-19274.html</guid><pubDate>Wed, 17 Jun 2026 02:59:41 +0000</pubDate><description>MEDIUM 6.1: A Cross SIte Scripting (XSS) vulnerability exists in Dhcms 2017-09-18 in guestbook via the message board, which could let a remote malicious user execute arbitrary code.</description></item></channel></rss>