<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: fumiao</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-28099: opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,</title><link>https://patchthecve.com/cve/CVE-2025-28099.html</link><guid>https://patchthecve.com/cve/CVE-2025-28099.html</guid><pubDate>Wed, 17 Jun 2026 09:04:33 +0000</pubDate><description>MEDIUM 4.3: opencms V2.3 is vulnerable to Arbitrary file read in src/main/webapp/view/admin/document/dataPage.jsp,</description></item><item><title>CVE-2025-3317: A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec20</title><link>https://patchthecve.com/cve/CVE-2025-3317.html</link><guid>https://patchthecve.com/cve/CVE-2025-3317.html</guid><pubDate>Wed, 17 Jun 2026 09:19:39 +0000</pubDate><description>MEDIUM 4.3: A vulnerability classified as problematic has been found in fumiao opencms up to a0fafa5cff58719e9b27c2a2eec204cc165ce14f. Affected is an unknown function of the file opencms-dev/src/main/webapp/view/admin/document/dataPage.jsp. The manipulation of the argument path leads to path traversal. It is po</description></item><item><title>CVE-2025-0708: A vulnerability was found in fumiao opencms 2.2</title><link>https://patchthecve.com/cve/CVE-2025-0708.html</link><guid>https://patchthecve.com/cve/CVE-2025-0708.html</guid><pubDate>Wed, 17 Jun 2026 08:27:00 +0000</pubDate><description>LOW 3.5: A vulnerability was found in fumiao opencms 2.2. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/model/addOrUpdate of the component Add Model Management Page. The manipulation of the argument 模板前缀 leads to cross site scripting. The attack can be initia</description></item></channel></rss>