https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-41930.htmlhttps://patchthecve.com/cve/CVE-2021-41930.htmlWed, 17 Jun 2026 04:09:04 +0000MEDIUM 6.1: Cross site scripting (XSS) vulnerability in Sourcecodester Online Covid Vaccination Scheduler System v1 by oretnom23, allows attackers to execute arbitrary code via the lid parameter to /scheduler/addSchedule.php.https://patchthecve.com/cve/CVE-2021-37803.htmlhttps://patchthecve.com/cve/CVE-2021-37803.htmlWed, 17 Jun 2026 04:01:09 +0000HIGH 8.1: An SQL Injection vulnerability exists in Sourcecodester Online Covid Vaccination Scheduler System 1.0 via the username in lognin.php .https://patchthecve.com/cve/CVE-2021-36622.htmlhttps://patchthecve.com/cve/CVE-2021-36622.htmlWed, 17 Jun 2026 03:58:58 +0000CRITICAL 9.8: Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the Contenhttps://patchthecve.com/cve/CVE-2021-36621.htmlhttps://patchthecve.com/cve/CVE-2021-36621.htmlWed, 17 Jun 2026 03:58:58 +0000HIGH 8.1: Sourcecodester Online Covid Vaccination Scheduler System 1.0 is vulnerable to SQL Injection. The username parameter is vulnerable to time-based SQL injection. Upon successful dumping the admin password hash, an attacker can decrypt and obtain the plain-text password. Hence, the attacker could authen