PatchTheCVE: independentsofthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-28150: An issue was discovered in Independentsoft JODF before 1.1.110https://patchthecve.com/cve/CVE-2023-28150.htmlhttps://patchthecve.com/cve/CVE-2023-28150.htmlWed, 17 Jun 2026 05:46:58 +0000MEDIUM 5.3: An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.CVE-2023-28151: An issue was discovered in Independentsoft JSpreadsheet before 1.1.110https://patchthecve.com/cve/CVE-2023-28151.htmlhttps://patchthecve.com/cve/CVE-2023-28151.htmlWed, 17 Jun 2026 05:46:58 +0000MEDIUM 5.3: An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.CVE-2023-28152: An issue was discovered in Independentsoft JWord before 1.1.110https://patchthecve.com/cve/CVE-2023-28152.htmlhttps://patchthecve.com/cve/CVE-2023-28152.htmlWed, 17 Jun 2026 05:46:58 +0000MEDIUM 5.3: An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file.