https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-6810.htmlhttps://patchthecve.com/cve/CVE-2015-6810.htmlWed, 17 Jun 2026 00:31:27 +0000LOW 3.5: Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB, or Power Board) 4.x before 4.0.12.1 allows remote authenticated users to inject arbitrary web script or HTML via the event_location[address] array parameter to calendar/submit/.https://patchthecve.com/cve/CVE-2014-9239.htmlhttps://patchthecve.com/cve/CVE-2014-9239.htmlWed, 17 Jun 2026 00:17:58 +0000HIGH 7.5: SQL injection vulnerability in the IPS Connect service (interface/ipsconnect/ipsconnect.php) in Invision Power Board (aka IPB or IP.Board) 3.3.x and 3.4.x through 3.4.7 before 20141114 allows remote attackers to execute arbitrary SQL commands via the id[] parameter.https://patchthecve.com/cve/CVE-2014-3149.htmlhttps://patchthecve.com/cve/CVE-2014-3149.htmlWed, 17 Jun 2026 00:07:40 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Invision Power IP.Board (aka IPB or Power Board) 3.3.x and 3.4.x through 3.4.6, as downloaded before 20140424, or IP.Nexus 1.5.x through 1.5.9, as downloaded before 20140424, allows remote attackers to inject arbitrary web script or HTML via unspecified vehttps://patchthecve.com/cve/CVE-2012-5692.htmlhttps://patchthecve.com/cve/CVE-2012-5692.htmlTue, 16 Jun 2026 23:47:15 +0000HIGH 10.0: Unspecified vulnerability in admin/sources/base/core.php in Invision Power Board (aka IPB or IP.Board) 3.1.x through 3.3.x has unknown impact and remote attack vectors.