https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-2547.htmlhttps://patchthecve.com/cve/CVE-2026-2547.htmlWed, 17 Jun 2026 10:31:17 +0000LOW 3.5: A vulnerability was detected in LigeroSmart up to 6.1.26. The impacted element is the function AgentDashboard of the file /otrs/index.pl. Performing a manipulation of the argument Subaction results in cross site scripting. Remote exploitation of the attack is possible. The exploit is now public and https://patchthecve.com/cve/CVE-2026-2546.htmlhttps://patchthecve.com/cve/CVE-2026-2546.htmlWed, 17 Jun 2026 10:31:17 +0000LOW 3.5: A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of the file /otrs/index.pl. Such manipulation of the argument SortBy leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and mayhttps://patchthecve.com/cve/CVE-2026-2545.htmlhttps://patchthecve.com/cve/CVE-2026-2545.htmlWed, 17 Jun 2026 10:31:17 +0000LOW 3.5: A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?Action=AgentTicketSearch. This manipulation of the argument Profile causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the pubhttps://patchthecve.com/cve/CVE-2026-1049.htmlhttps://patchthecve.com/cve/CVE-2026-1049.htmlWed, 17 Jun 2026 10:14:54 +0000LOW 3.5: A security vulnerability has been detected in LigeroSmart up to 6.1.26. The affected element is an unknown function of the file /otrs/index.pl. Such manipulation of the argument TicketID leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed publihttps://patchthecve.com/cve/CVE-2026-1048.htmlhttps://patchthecve.com/cve/CVE-2026-1048.htmlWed, 17 Jun 2026 10:14:54 +0000LOW 3.5: A weakness has been identified in LigeroSmart up to 6.1.26. Impacted is an unknown function of the file /otrs/index.pl?Action=AgentTicketZoom. This manipulation of the argument TicketID causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available thttps://patchthecve.com/cve/CVE-2025-15437.htmlhttps://patchthecve.com/cve/CVE-2025-15437.htmlSat, 25 Jul 2026 11:10:00 +0000LOW 3.5: A vulnerability was found in LigeroSmart up to 6.1.24. This affects an unknown part of the component Environment Variable Handler. Performing a manipulation of the argument REQUEST_URI results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could b