https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-41697.htmlhttps://patchthecve.com/cve/CVE-2021-41697.htmlWed, 17 Jun 2026 04:08:49 +0000MEDIUM 6.1: A reflected Cross Site Scripting (XSS) vulnerability exists in Premiumdatingscript 4.2.7.7 via the aerror_description parameter in assets/sources/instagram.php script.https://patchthecve.com/cve/CVE-2021-41696.htmlhttps://patchthecve.com/cve/CVE-2021-41696.htmlWed, 17 Jun 2026 04:08:49 +0000MEDIUM 6.5: An authentication bypass (account takeover) vulnerability exists in Premiumdatingscript 4.2.7.7 due to a weak password reset mechanism in requests\user.php.https://patchthecve.com/cve/CVE-2021-41695.htmlhttps://patchthecve.com/cve/CVE-2021-41695.htmlWed, 17 Jun 2026 04:08:49 +0000CRITICAL 9.8: An SQL Injection vulnerability exists in Premiumdatingscript 4.2.7.7 via the ip parameter in connect.php. .https://patchthecve.com/cve/CVE-2021-41694.htmlhttps://patchthecve.com/cve/CVE-2021-41694.htmlWed, 17 Jun 2026 04:08:49 +0000CRITICAL 9.8: An Incorrect Access Control vulnerability exists in Premiumdatingscript 4.2.7.7 via the password change procedure in requests\user.php.