https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-3286.htmlhttps://patchthecve.com/cve/CVE-2026-3286.htmlWed, 17 Jun 2026 10:43:20 +0000MEDIUM 6.3: A vulnerability was identified in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3. The impacted element is the function Save of the file paicoding-web/src/main/java/com/github/paicoding/forum/web/common/image/rest/ImageRestController.java of the component Image Save Endpoint. Such manipulation of the arghttps://patchthecve.com/cve/CVE-2025-4839.htmlhttps://patchthecve.com/cve/CVE-2025-4839.htmlWed, 17 Jun 2026 09:34:07 +0000LOW 3.1: A vulnerability has been found in itwanger paicoding 1.0.0/1.0.1/1.0.2/1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /paicoding-core/src/main/java/com/github/paicoding/forum/core/util/CrossUtil.java. The manipulation leads to permissive chttps://patchthecve.com/cve/CVE-2025-3967.htmlhttps://patchthecve.com/cve/CVE-2025-3967.htmlWed, 17 Jun 2026 09:21:01 +0000MEDIUM 5.4: A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack rehttps://patchthecve.com/cve/CVE-2025-3966.htmlhttps://patchthecve.com/cve/CVE-2025-3966.htmlWed, 17 Jun 2026 09:21:01 +0000MEDIUM 4.3: A vulnerability was found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/home?userId=1&homeSelectType=read of the component Browsing History Handler. The manipulation leads to information disclosure. The attack may behttps://patchthecve.com/cve/CVE-2025-3965.htmlhttps://patchthecve.com/cve/CVE-2025-3965.htmlWed, 17 Jun 2026 09:21:00 +0000LOW 3.5: A vulnerability has been found in itwanger paicoding 1.0.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /article/app/post. The manipulation of the argument content leads to cross site scripting. The attack can be launched remotely. The exploit