https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3970.htmlhttps://patchthecve.com/cve/CVE-2025-3970.htmlWed, 17 Jun 2026 09:21:01 +0000LOW 3.5: A vulnerability classified as problematic has been found in baseweb JSite up to 1.0. Affected is an unknown function of the file /sys/office/save. The manipulation of the argument Remarks leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to thttps://patchthecve.com/cve/CVE-2025-3790.htmlhttps://patchthecve.com/cve/CVE-2025-3790.htmlWed, 17 Jun 2026 09:20:40 +0000MEDIUM 5.3: A vulnerability classified as critical has been found in baseweb JSite 1.0. This affects an unknown part of the file /druid/index.html of the component Apache Druid Monitoring Console. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-3789.htmlhttps://patchthecve.com/cve/CVE-2025-3789.htmlWed, 17 Jun 2026 09:20:40 +0000LOW 3.5: A vulnerability was found in baseweb JSite 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /a/sys/area/save. The manipulation of the argument Name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosehttps://patchthecve.com/cve/CVE-2025-3788.htmlhttps://patchthecve.com/cve/CVE-2025-3788.htmlWed, 17 Jun 2026 09:20:40 +0000LOW 3.5: A vulnerability was found in baseweb JSite 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /a/sys/user/save. The manipulation of the argument Name leads to cross site scripting. The attack can be launched remotely. The exploit has been