https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-39256.htmlhttps://patchthecve.com/cve/CVE-2022-39256.htmlWed, 17 Jun 2026 04:58:00 +0000CRITICAL 9.0: Orckestra C1 CMS is a .NET based Web Content Management System. A vulnerability in versions prior to 6.13 allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS. Authentication is required to exploit this vulnerability. The authenticated user may perform the https://patchthecve.com/cve/CVE-2022-24789.htmlhttps://patchthecve.com/cve/CVE-2022-24789.htmlWed, 17 Jun 2026 04:32:31 +0000HIGH 7.6: C1 CMS is an open-source, .NET based Content Management System (CMS). Versions prior to 6.12 allow an authenticated user to exploit Server Side Request Forgery (SSRF) by causing the server to make arbitrary GET requests to other servers in the local network or on localhost. The attacker may also truhttps://patchthecve.com/cve/CVE-2021-34992.htmlhttps://patchthecve.com/cve/CVE-2021-34992.htmlWed, 17 Jun 2026 03:56:56 +0000HIGH 8.8: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Orckestra C1 CMS 6.10. Authentication is required to exploit this vulnerability. The specific flaw exists within Composite.dll. The issue results from the lack of proper validation of user-supplied data