https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-29016.htmlhttps://patchthecve.com/cve/CVE-2023-29016.htmlWed, 17 Jun 2026 05:49:11 +0000MEDIUM 6.1: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when using nicknames. An attacker could create a user account and enter malicious scripts into thttps://patchthecve.com/cve/CVE-2023-29015.htmlhttps://patchthecve.com/cve/CVE-2023-29015.htmlWed, 17 Jun 2026 05:49:11 +0000MEDIUM 6.1: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified in the user comment feature of Goobi viewer core prior to version 23.03. An attacker could create a specially crafted comment, resulting in https://patchthecve.com/cve/CVE-2023-29014.htmlhttps://patchthecve.com/cve/CVE-2023-29014.htmlWed, 17 Jun 2026 05:49:11 +0000MEDIUM 6.1: The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been identified in Goobi viewer core prior to version 23.03 when evaluating the LOGID parameter. An attacker could trick a user into following a s