https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-12471.htmlhttps://patchthecve.com/cve/CVE-2020-12471.htmlWed, 17 Jun 2026 02:51:52 +0000CRITICAL 9.8: MonoX through 5.1.40.5152 allows remote code execution via HTML5Upload.ashx or Pages/SocialNetworking/lng/en-US/PhotoGallery.aspx because of deserialization in ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, and SilverLightUploadHandler.https://patchthecve.com/cve/CVE-2020-12470.htmlhttps://patchthecve.com/cve/CVE-2020-12470.htmlWed, 17 Jun 2026 02:51:52 +0000HIGH 7.2: MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template.https://patchthecve.com/cve/CVE-2020-12473.htmlhttps://patchthecve.com/cve/CVE-2020-12473.htmlWed, 17 Jun 2026 02:51:52 +0000HIGH 7.2: MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program.https://patchthecve.com/cve/CVE-2020-12472.htmlhttps://patchthecve.com/cve/CVE-2020-12472.htmlWed, 17 Jun 2026 02:51:52 +0000MEDIUM 5.4: MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description.