https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2013-3729.htmlhttps://patchthecve.com/cve/CVE-2013-3729.htmlTue, 16 Jun 2026 23:55:41 +0000MEDIUM 6.8: Multiple cross-site request forgery (CSRF) vulnerabilities in Kasseler CMS before 2 r1232 allow remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the (1) groups[] parameter in a send action in the sendmail module or (2) query parametehttps://patchthecve.com/cve/CVE-2013-3728.htmlhttps://patchthecve.com/cve/CVE-2013-3728.htmlTue, 16 Jun 2026 23:55:41 +0000LOW 3.5: Cross-site scripting (XSS) vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users with permissions to create categories to inject arbitrary web script or HTML via the cat parameter in an admin_new_category action to admin.php.https://patchthecve.com/cve/CVE-2013-3727.htmlhttps://patchthecve.com/cve/CVE-2013-3727.htmlTue, 16 Jun 2026 23:55:41 +0000HIGH 7.5: SQL injection vulnerability in Kasseler CMS before 2 r1232 allows remote authenticated users to execute arbitrary SQL commands via the groups[] parameter to admin.php. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands.