https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-52037.htmlhttps://patchthecve.com/cve/CVE-2025-52037.htmlWed, 17 Jun 2026 09:35:56 +0000MEDIUM 6.1: A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=sites. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commithttps://patchthecve.com/cve/CVE-2025-52036.htmlhttps://patchthecve.com/cve/CVE-2025-52036.htmlWed, 17 Jun 2026 09:35:56 +0000MEDIUM 6.1: A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=categories. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of chttps://patchthecve.com/cve/CVE-2025-52035.htmlhttps://patchthecve.com/cve/CVE-2025-52035.htmlWed, 17 Jun 2026 09:35:56 +0000MEDIUM 6.1: A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (dated 2024-0