https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-1102.htmlhttps://patchthecve.com/cve/CVE-2022-1102.htmlWed, 17 Jun 2026 04:21:49 +0000MEDIUM 4.3: A vulnerability classified as problematic has been found in SourceCodester Royale Event Management System 1.0. Affected is an unknown function of the file /royal_event/companyprofile.php. The manipulation of the argument companyname/regno/companyaddress/companyemail leads to cross site scripting. Ithttps://patchthecve.com/cve/CVE-2022-1101.htmlhttps://patchthecve.com/cve/CVE-2022-1101.htmlWed, 17 Jun 2026 04:21:49 +0000HIGH 7.3: A vulnerability was found in SourceCodester Royale Event Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /royal_event/userregister.php. The manipulation leads to improper authentication. The attack may be initiated remotely. The identifierhttps://patchthecve.com/cve/CVE-2022-38323.htmlhttps://patchthecve.com/cve/CVE-2022-38323.htmlWed, 17 Jun 2026 04:56:25 +0000HIGH 7.2: Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.https://patchthecve.com/cve/CVE-2022-28080.htmlhttps://patchthecve.com/cve/CVE-2022-28080.htmlWed, 17 Jun 2026 04:37:57 +0000HIGH 8.8: Royal Event Management System v1.0 was discovered to contain a SQL injection vulnerability via the todate parameter.