PatchTheCVE: nozominetworkshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2025-40904: A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validahttps://patchthecve.com/cve/CVE-2025-40904.htmlhttps://patchthecve.com/cve/CVE-2025-40904.htmlWed, 14 Oct 2026 13:10:00 +0000MEDIUM 6.5: A Stored HTML Injection vulnerability was discovered in the Smart Polling functionality due to improper validation of an input parameter. An authenticated user with limited privileges can push malicious remote strategies containing HTML tags through the sync. When a victim views the affected remote CVE-2025-40903: A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to imprhttps://patchthecve.com/cve/CVE-2025-40903.htmlhttps://patchthecve.com/cve/CVE-2025-40903.htmlWed, 14 Oct 2026 13:10:00 +0000MEDIUM 5.9: A Stored HTML Injection vulnerability was discovered in the Schedule Restore Archive functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious restore schedule containing HTML tags. When a victim views the affected schCVE-2025-40902: A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of https://patchthecve.com/cve/CVE-2025-40902.htmlhttps://patchthecve.com/cve/CVE-2025-40902.htmlWed, 14 Oct 2026 13:10:00 +0000MEDIUM 5.9: A Stored HTML Injection vulnerability was discovered in the Users functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can create a malicious user whose username contains HTML tags. When a victim attempts to delete a group containing thCVE-2025-40901: A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper https://patchthecve.com/cve/CVE-2025-40901.htmlhttps://patchthecve.com/cve/CVE-2025-40901.htmlWed, 14 Oct 2026 13:10:00 +0000MEDIUM 5.9: A Stored HTML Injection vulnerability was discovered in the Credentials Manager functionality due to improper validation of an input parameter. An authenticated user with administrative privileges can define a malicious identity containing HTML tags. When a victim attempts to delete the affected ideCVE-2025-40900: An Angular template injection vulnerability was discovered in the Reports functionality due to improper validahttps://patchthecve.com/cve/CVE-2025-40900.htmlhttps://patchthecve.com/cve/CVE-2025-40900.htmlWed, 14 Oct 2026 13:10:00 +0000MEDIUM 4.6: An Angular template injection vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing an Angular template payload, or a victim can be socially engineered to impor