https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-4543.htmlhttps://patchthecve.com/cve/CVE-2025-4543.htmlWed, 17 Jun 2026 09:33:29 +0000HIGH 7.3: A vulnerability, which was classified as critical, was found in LyLme Spage 2.1. This affects an unknown part of the file lylme_spage/blob/master/admin/ajax_link.php. The manipulation of the argument sort leads to sql injection. It is possible to initiate the attack remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2024-48176.htmlhttps://patchthecve.com/cve/CVE-2024-48176.htmlWed, 17 Jun 2026 07:58:15 +0000CRITICAL 9.8: Lylme Spage v1.9.5 is vulnerable to Incorrect Access Control. There is no limit on the number of login attempts, and the verification code will not be refreshed after a failed login, which allows attackers to blast the username and password and log into the system backend.https://patchthecve.com/cve/CVE-2024-48356.htmlhttps://patchthecve.com/cve/CVE-2024-48356.htmlWed, 17 Jun 2026 07:58:26 +0000CRITICAL 9.8: LyLme Spage <=1.6.0 is vulnerable to SQL Injection via /admin/group.php.https://patchthecve.com/cve/CVE-2024-48357.htmlhttps://patchthecve.com/cve/CVE-2024-48357.htmlWed, 17 Jun 2026 07:58:26 +0000CRITICAL 9.8: LyLme Spage 1.2.0 through 1.6.0 is vulnerable to SQL Injection via /admin/apply.php.https://patchthecve.com/cve/CVE-2024-9790.htmlhttps://patchthecve.com/cve/CVE-2024-9790.htmlWed, 17 Jun 2026 08:25:16 +0000MEDIUM 4.7: A vulnerability was found in LyLme_spage 1.9.5. It has been classified as critical. Affected is an unknown function of the file /admin/sou.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and mhttps://patchthecve.com/cve/CVE-2024-9789.htmlhttps://patchthecve.com/cve/CVE-2024-9789.htmlWed, 17 Jun 2026 08:25:15 +0000MEDIUM 4.7: A vulnerability was found in LyLme_spage 1.9.5 and classified as critical. This issue affects some unknown processing of the file /admin/apply.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may bhttps://patchthecve.com/cve/CVE-2024-9788.htmlhttps://patchthecve.com/cve/CVE-2024-9788.htmlWed, 17 Jun 2026 08:25:15 +0000MEDIUM 4.7: A vulnerability has been found in LyLme_spage 1.9.5 and classified as critical. This vulnerability affects unknown code of the file /admin/tag.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may b