https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-18694.htmlhttps://patchthecve.com/cve/CVE-2020-18694.htmlWed, 17 Jun 2026 02:59:24 +0000HIGH 8.8: Cross Site Request Forgery (CSRF) in IgnitedCMS v1.0 allows remote attackers to obtain sensitive information and gain privilege via the component "/admin/profile/save_profile".https://patchthecve.com/cve/CVE-2019-13370.htmlhttps://patchthecve.com/cve/CVE-2019-13370.htmlWed, 17 Jun 2026 02:16:39 +0000HIGH 8.8: index.php/admin/permissions in Ignited CMS through 2017-02-19 allows CSRF to add an administrator.https://patchthecve.com/cve/CVE-2018-15203.htmlhttps://patchthecve.com/cve/CVE-2018-15203.htmlWed, 17 Jun 2026 01:42:13 +0000MEDIUM 6.5: An issue was discovered in Ignited CMS through 2017-02-19. ign/index.php/admin/pages/add_page allows a CSRF attack to add pages.