https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-1084.htmlhttps://patchthecve.com/cve/CVE-2025-1084.htmlWed, 17 Jun 2026 08:38:21 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public anhttps://patchthecve.com/cve/CVE-2025-1083.htmlhttps://patchthecve.com/cve/CVE-2025-1083.htmlWed, 17 Jun 2026 08:38:21 +0000LOW 3.1: A vulnerability classified as problematic was found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this vulnerability is an unknown functionality of the component CORS Handler. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack can be launched remotely. Thttps://patchthecve.com/cve/CVE-2025-1082.htmlhttps://patchthecve.com/cve/CVE-2025-1082.htmlWed, 17 Jun 2026 08:38:21 +0000LOW 3.5: A vulnerability classified as problematic has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected is an unknown function of the file /api/admin/question/edit of the component Exam Edit Handler. The manipulation of the argument title/content leads to cross site scripting. It is possible to lau