PatchTheCVE: mecodiahttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2024-41519: Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/verahttps://patchthecve.com/cve/CVE-2024-41519.htmlhttps://patchthecve.com/cve/CVE-2024-41519.htmlWed, 17 Jun 2026 07:47:50 +0000MEDIUM 5.4: Feripro <= v2.2.3 is vulnerable to Cross Site Scripting (XSS) via "/admin/programm/<program_id>/zuordnung/veranstaltungen/<event_id>" through the "school" input field.CVE-2024-41518: An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2https://patchthecve.com/cve/CVE-2024-41518.htmlhttps://patchthecve.com/cve/CVE-2024-41518.htmlWed, 17 Jun 2026 07:47:50 +0000HIGH 7.5: An Incorrect Access Control vulnerability in "/admin/programm/<program_id>/export/statistics" in Feripro <= v2.2.3 allows remote attackers to export an XLSX file with information about registrations and participants.CVE-2024-41517: An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Ferihttps://patchthecve.com/cve/CVE-2024-41517.htmlhttps://patchthecve.com/cve/CVE-2024-41517.htmlWed, 17 Jun 2026 07:47:49 +0000MEDIUM 5.3: An Incorrect Access Control vulnerability in "/admin/benutzer/institution/rechteverwaltung/uebersicht" in Feripro <= v2.2.3 allows remote attackers to get a list of all users and their corresponding privileges.