https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-7743.htmlhttps://patchthecve.com/cve/CVE-2024-7743.htmlWed, 17 Jun 2026 08:20:50 +0000HIGH 7.3: A vulnerability was found in wanglongcn ltcms 1.0.20. It has been declared as critical. Affected by this vulnerability is the function downloadUrl of the file /api/file/downloadUrl of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. The attack chttps://patchthecve.com/cve/CVE-2024-7742.htmlhttps://patchthecve.com/cve/CVE-2024-7742.htmlWed, 17 Jun 2026 08:20:49 +0000HIGH 7.3: A vulnerability was found in wanglongcn ltcms 1.0.20. It has been classified as critical. Affected is the function multiDownload of the file /api/file/multiDownload of the component API Endpoint. The manipulation of the argument file leads to server-side request forgery. It is possible to launch thehttps://patchthecve.com/cve/CVE-2024-7741.htmlhttps://patchthecve.com/cve/CVE-2024-7741.htmlWed, 17 Jun 2026 08:20:49 +0000MEDIUM 5.3: A vulnerability was found in wanglongcn ltcms 1.0.20 and classified as critical. This issue affects the function downloadFile of the file /api/file/downloadfile of the component API Endpoint. The manipulation of the argument file leads to path traversal. The attack may be initiated remotely. The exphttps://patchthecve.com/cve/CVE-2024-7740.htmlhttps://patchthecve.com/cve/CVE-2024-7740.htmlWed, 17 Jun 2026 08:20:49 +0000HIGH 7.3: A vulnerability has been found in wanglongcn ltcms 1.0.20 and classified as critical. This vulnerability affects the function download of the file /api/test/download of the component API Endpoint. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated