PatchTheCVE: online clothing store projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-28140: SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature https://patchthecve.com/cve/CVE-2020-28140.htmlhttps://patchthecve.com/cve/CVE-2020-28140.htmlWed, 17 Jun 2026 03:10:08 +0000CRITICAL 9.8: SourceCodester Online Clothing Store 1.0 is affected by an arbitrary file upload via the image upload feature of Products.php.CVE-2020-28139: SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offerhttps://patchthecve.com/cve/CVE-2020-28139.htmlhttps://patchthecve.com/cve/CVE-2020-28139.htmlWed, 17 Jun 2026 03:10:08 +0000MEDIUM 6.1: SourceCodester Online Clothing Store 1.0 is affected by a cross-site scripting (XSS) vulnerability via a Offer Detail field in offer.php.CVE-2020-28138: SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to loginhttps://patchthecve.com/cve/CVE-2020-28138.htmlhttps://patchthecve.com/cve/CVE-2020-28138.htmlWed, 17 Jun 2026 03:10:08 +0000CRITICAL 9.8: SourceCodester Online Clothing Store 1.0 is affected by a SQL Injection via the txtUserName parameter to login.php.