https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-35860.htmlhttps://patchthecve.com/cve/CVE-2023-35860.htmlWed, 17 Jun 2026 06:05:21 +0000MEDIUM 5.3: A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.https://patchthecve.com/cve/CVE-2023-35859.htmlhttps://patchthecve.com/cve/CVE-2023-35859.htmlWed, 17 Jun 2026 06:05:21 +0000MEDIUM 6.1: A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters.https://patchthecve.com/cve/CVE-2023-35858.htmlhttps://patchthecve.com/cve/CVE-2023-35858.htmlWed, 17 Jun 2026 06:05:21 +0000MEDIUM 5.3: XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application information.