https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-50859.htmlhttps://patchthecve.com/cve/CVE-2025-50859.htmlWed, 17 Jun 2026 09:35:23 +0000MEDIUM 6.1: Reflected Cross-Site Scripting in the Change Template function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the template parameter.https://patchthecve.com/cve/CVE-2025-50858.htmlhttps://patchthecve.com/cve/CVE-2025-50858.htmlWed, 17 Jun 2026 09:35:23 +0000MEDIUM 6.1: Reflected Cross-Site Scripting in the List MySQL Databases function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via the action parameter.https://patchthecve.com/cve/CVE-2025-50860.htmlhttps://patchthecve.com/cve/CVE-2025-50860.htmlWed, 17 Jun 2026 09:35:23 +0000MEDIUM 5.4: SQL Injection in the listdomains function in Easy Hosting Control Panel (EHCP) 20.04.1.b allows authenticated attackers to access or manipulate database contents via the arananalan POST parameter.https://patchthecve.com/cve/CVE-2025-50926.htmlhttps://patchthecve.com/cve/CVE-2025-50926.htmlWed, 17 Jun 2026 09:35:26 +0000MEDIUM 6.5: Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function.https://patchthecve.com/cve/CVE-2025-50928.htmlhttps://patchthecve.com/cve/CVE-2025-50928.htmlWed, 17 Jun 2026 09:35:26 +0000MEDIUM 4.8: Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the Change Settings function.https://patchthecve.com/cve/CVE-2025-50927.htmlhttps://patchthecve.com/cve/CVE-2025-50927.htmlWed, 17 Jun 2026 09:35:26 +0000MEDIUM 6.3: A reflected cross-site scripting (XSS) vulnerability in the List All FTP User Function in EHCP v20.04.1.b allows authenticated attackers to execute arbitrary JavaScript via injecting a crafted payload into the ftpusername parameter.