PatchTheCVE: nucleus cmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2008-4446: Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to injhttps://patchthecve.com/cve/CVE-2008-4446.htmlhttps://patchthecve.com/cve/CVE-2008-4446.htmlTue, 16 Jun 2026 22:57:49 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2008-0497: Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject ahttps://patchthecve.com/cve/CVE-2008-0497.htmlhttps://patchthecve.com/cve/CVE-2008-0497.htmlTue, 16 Jun 2026 22:49:45 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.CVE-2007-5429: Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrhttps://patchthecve.com/cve/CVE-2007-5429.htmlhttps://patchthecve.com/cve/CVE-2007-5429.htmlTue, 16 Jun 2026 22:46:07 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter.CVE-2006-6920: Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary wehttps://patchthecve.com/cve/CVE-2006-6920.htmlhttps://patchthecve.com/cve/CVE-2006-6920.htmlTue, 16 Jun 2026 22:34:03 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving (1) lib/ADMIN.php and (2) lib/SKIN.php.