https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-27330.htmlhttps://patchthecve.com/cve/CVE-2022-27330.htmlWed, 17 Jun 2026 04:36:55 +0000MEDIUM 5.4: A cross-site scripting (XSS) vulnerability in /public/admin/index.php?add_product of E-Commerce Website v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Title text field.https://patchthecve.com/cve/CVE-2021-25204.htmlhttps://patchthecve.com/cve/CVE-2021-25204.htmlWed, 17 Jun 2026 03:41:37 +0000MEDIUM 5.4: Cross-site scripting (XSS) vulnerability in SourceCodester E-Commerce Website v 1.0 allows remote attackers to inject arbitrary web script or HTM via the subject field to feedback_process.php.https://patchthecve.com/cve/CVE-2021-25207.htmlhttps://patchthecve.com/cve/CVE-2021-25207.htmlWed, 17 Jun 2026 03:41:38 +0000CRITICAL 9.8: Arbitrary file upload vulnerability in SourceCodester E-Commerce Website v 1.0 allows attackers to execute arbitrary code via the file upload to prodViewUpdate.php.https://patchthecve.com/cve/CVE-2021-25205.htmlhttps://patchthecve.com/cve/CVE-2021-25205.htmlWed, 17 Jun 2026 03:41:37 +0000CRITICAL 9.8: SQL injection vulnerability in SourceCodester E-Commerce Website V 1.0 allows remote attackers to execute arbitrary SQL statements, via the update parameter to empViewUpdate.php .