https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-26473.htmlhttps://patchthecve.com/cve/CVE-2024-26473.htmlWed, 17 Jun 2026 07:17:42 +0000MEDIUM 6.1: A reflected cross-site scripting (XSS) vulnerability in SocialMediaWebsite v1.0.1 allows attackers to inject malicious JavaScript into the web browser of a victim via the poll parameter in poll.php.https://patchthecve.com/cve/CVE-2024-26472.htmlhttps://patchthecve.com/cve/CVE-2024-26472.htmlWed, 17 Jun 2026 07:17:42 +0000MEDIUM 6.1: KLiK SocialMediaWebsite version 1.0.1 from msaad1999 has a reflected cross-site scripting (XSS) vulnerability which may allow remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' or 'validator' parameters of 'create-new-phttps://patchthecve.com/cve/CVE-2024-26471.htmlhttps://patchthecve.com/cve/CVE-2024-26471.htmlWed, 17 Jun 2026 07:17:42 +0000MEDIUM 5.4: A reflected cross-site scripting (XSS) vulnerability in zhimengzhe iBarn v1.5 allows attackers to inject malicious JavaScript into the web browser of a victim via the search parameter in offer.php.https://patchthecve.com/cve/CVE-2023-38876.htmlhttps://patchthecve.com/cve/CVE-2023-38876.htmlWed, 17 Jun 2026 06:11:14 +0000MEDIUM 6.1: A reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'selector' parameter in '/reset-password'.https://patchthecve.com/cve/CVE-2023-38875.htmlhttps://patchthecve.com/cve/CVE-2023-38875.htmlWed, 17 Jun 2026 06:11:14 +0000MEDIUM 6.1: A reflected cross-site scripting (XSS) vulnerability in msaad1999's PHP-Login-System 2.0.1 allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'validator' parameter in '/reset-password'.