PatchTheCVE: ocproductshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2021-46360: Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to executhttps://patchthecve.com/cve/CVE-2021-46360.htmlhttps://patchthecve.com/cve/CVE-2021-46360.htmlWed, 17 Jun 2026 04:14:48 +0000HIGH 8.8: Authenticated remote code execution (RCE) in Composr-CMS 10.0.39 and earlier allows remote attackers to execute arbitrary code via uploading a PHP shell through /adminzone/index.php?page=admin-commandr.CVE-2021-30150: Composr 10.0.36 allows XSS in an XML script.https://patchthecve.com/cve/CVE-2021-30150.htmlhttps://patchthecve.com/cve/CVE-2021-30150.htmlWed, 17 Jun 2026 03:49:44 +0000MEDIUM 6.1: Composr 10.0.36 allows XSS in an XML script.CVE-2021-30149: Composr 10.0.36 allows upload and execution of PHP files.https://patchthecve.com/cve/CVE-2021-30149.htmlhttps://patchthecve.com/cve/CVE-2021-30149.htmlWed, 17 Jun 2026 03:49:44 +0000CRITICAL 9.8: Composr 10.0.36 allows upload and execution of PHP files.