https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-13210.htmlhttps://patchthecve.com/cve/CVE-2024-13210.htmlWed, 17 Jun 2026 07:01:29 +0000MEDIUM 4.7: A vulnerability was found in donglight bookstore电商书城系统说明 1.0. It has been declared as critical. Affected by this vulnerability is the function uploadPicture of the file src/main/java/org/zdd/bookstore/web/controller/admin/AdminBookController. java. The manipulation of the argument pictureFile leads https://patchthecve.com/cve/CVE-2024-13197.htmlhttps://patchthecve.com/cve/CVE-2024-13197.htmlWed, 17 Jun 2026 07:01:26 +0000LOW 3.5: A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been rated as problematic. This issue affects the function updateUser of the file src/main/Java/org/zdd/bookstore/web/controller/admin/AdminUserControlle.java. The manipulation leads to cross site scripting. The attack may be inihttps://patchthecve.com/cve/CVE-2024-13196.htmlhttps://patchthecve.com/cve/CVE-2024-13196.htmlWed, 17 Jun 2026 07:01:26 +0000LOW 3.5: A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been declared as problematic. This vulnerability affects the function BookSearchList of the file src/main/java/org/zdd/bookstore/web/controller/BookInfoController.java. The manipulation of the argument keywords leads to cross sithttps://patchthecve.com/cve/CVE-2024-13195.htmlhttps://patchthecve.com/cve/CVE-2024-13195.htmlWed, 17 Jun 2026 07:01:26 +0000MEDIUM 6.3: A vulnerability was found in donglight bookstore电商书城系统说明 1.0.0. It has been classified as critical. This affects the function getHtml of the file src/main/java/org/zdd/bookstore/rawl/HttpUtil.java. The manipulation of the argument url leads to server-side request forgery. It is possible to initiate