PatchTheCVE: mangoswebv4 projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2017-6812: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.phphttps://patchthecve.com/cve/CVE-2017-6812.htmlhttps://patchthecve.com/cve/CVE-2017-6812.htmlWed, 17 Jun 2026 01:23:08 +0000MEDIUM 6.1: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.vote.php (id parameter).CVE-2017-6811: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.phphttps://patchthecve.com/cve/CVE-2017-6811.htmlhttps://patchthecve.com/cve/CVE-2017-6811.htmlWed, 17 Jun 2026 01:23:08 +0000MEDIUM 6.1: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.shop.php (id parameter).CVE-2017-6810: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.https://patchthecve.com/cve/CVE-2017-6810.htmlhttps://patchthecve.com/cve/CVE-2017-6810.htmlWed, 17 Jun 2026 01:23:08 +0000MEDIUM 6.1: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.fplinks.php (linkid parameter).CVE-2017-6809: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.phttps://patchthecve.com/cve/CVE-2017-6809.htmlhttps://patchthecve.com/cve/CVE-2017-6809.htmlWed, 17 Jun 2026 01:23:08 +0000MEDIUM 6.1: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.donate.php (id parameter).CVE-2017-6808: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php https://patchthecve.com/cve/CVE-2017-6808.htmlhttps://patchthecve.com/cve/CVE-2017-6808.htmlWed, 17 Jun 2026 01:23:08 +0000MEDIUM 6.1: paintballrefjosh/MaNGOSWebV4 4.0.8 is vulnerable to a reflected XSS in inc/admin/template_files/admin.faq.php (id parameter).CVE-2017-6478: paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parametehttps://patchthecve.com/cve/CVE-2017-6478.htmlhttps://patchthecve.com/cve/CVE-2017-6478.htmlWed, 17 Jun 2026 01:22:25 +0000MEDIUM 6.1: paintballrefjosh/MaNGOSWebV4 before 4.0.8 is vulnerable to a reflected XSS in install/index.php (step parameter).