PatchTheCVE: emlsoft projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-14968: An issue was discovered in EMLsoft 5.4.5https://patchthecve.com/cve/CVE-2018-14968.htmlhttps://patchthecve.com/cve/CVE-2018-14968.htmlWed, 17 Jun 2026 01:41:59 +0000CRITICAL 9.8: An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.address.php has SQL Injection via the numPerPage parameter.CVE-2018-14967: An issue was discovered in EMLsoft 5.4.5https://patchthecve.com/cve/CVE-2018-14967.htmlhttps://patchthecve.com/cve/CVE-2018-14967.htmlWed, 17 Jun 2026 01:41:58 +0000HIGH 8.8: An issue was discovered in EMLsoft 5.4.5. upload\eml\action\action.user.php has SQL Injection via the numPerPage parameter.CVE-2018-14966: An issue was discovered in EMLsoft 5.4.5https://patchthecve.com/cve/CVE-2018-14966.htmlhttps://patchthecve.com/cve/CVE-2018-14966.htmlWed, 17 Jun 2026 01:41:58 +0000HIGH 8.8: An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=user&do=add page allows CSRF.CVE-2018-14965: An issue was discovered in EMLsoft 5.4.5https://patchthecve.com/cve/CVE-2018-14965.htmlhttps://patchthecve.com/cve/CVE-2018-14965.htmlWed, 17 Jun 2026 01:41:58 +0000HIGH 8.8: An issue was discovered in EMLsoft 5.4.5. The eml/upload/eml/?action=address&do=add page allows CSRF.CVE-2018-14964: An issue was discovered in EMLsoft 5.4.5https://patchthecve.com/cve/CVE-2018-14964.htmlhttps://patchthecve.com/cve/CVE-2018-14964.htmlWed, 17 Jun 2026 01:41:58 +0000MEDIUM 5.4: An issue was discovered in EMLsoft 5.4.5. XSS exists via the eml/upload/eml/?action=address&do=edit page.