https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-26507.htmlhttps://patchthecve.com/cve/CVE-2020-26507.htmlWed, 17 Jun 2026 03:08:06 +0000HIGH 7.8: A CSV Injection (also known as Formula Injection) vulnerability in the Marmind web application with version 4.1.141.0 allows malicious users to gain remote control of other computers. By providing formula code in the “Notes” functionality in the main screen, an attacker can inject a payload into thehttps://patchthecve.com/cve/CVE-2020-26505.htmlhttps://patchthecve.com/cve/CVE-2020-26505.htmlWed, 17 Jun 2026 03:08:06 +0000MEDIUM 6.1: A Stored Cross-Site Scripting (XSS) vulnerability in the “Marmind” web application with version 4.1.141.0 allows an attacker to inject code that will later be executed by legitimate users when they open the assets containing the JavaScript code. This would allow an attacker to perform unauthorized ahttps://patchthecve.com/cve/CVE-2020-26506.htmlhttps://patchthecve.com/cve/CVE-2020-26506.htmlWed, 17 Jun 2026 03:08:06 +0000MEDIUM 4.3: An Authorization Bypass vulnerability in the Marmind web application with version 4.1.141.0 allows users with lower privileges to gain control to files uploaded by administrative users. The accessed files were not visible by the low privileged users in the web GUI.