https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2021-47783.htmlhttps://patchthecve.com/cve/CVE-2021-47783.htmlWed, 17 Jun 2026 04:18:29 +0000MEDIUM 5.4: Phpwcms 1.9.30 contains a file upload vulnerability that allows authenticated attackers to upload malicious SVG files with embedded JavaScript. Attackers can upload crafted SVG payloads through the multiple file upload feature to potentially execute cross-site scripting attacks on the platform.https://patchthecve.com/cve/CVE-2025-5499.htmlhttps://patchthecve.com/cve/CVE-2025-5499.htmlWed, 17 Jun 2026 09:48:02 +0000HIGH 7.3: A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function is_file/getimagesize of the file image_resized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit hashttps://patchthecve.com/cve/CVE-2025-5498.htmlhttps://patchthecve.com/cve/CVE-2025-5498.htmlWed, 17 Jun 2026 09:48:02 +0000MEDIUM 5.5: A vulnerability was found in slackero phpwcms up to 1.9.45/1.10.8. It has been rated as critical. This issue affects the function file_get_contents/is_file of the file include/inc_lib/content/cnt21.readform.inc.php of the component Custom Source Tab. The manipulation of the argument cpage_custom leahttps://patchthecve.com/cve/CVE-2025-5497.htmlhttps://patchthecve.com/cve/CVE-2025-5497.htmlWed, 17 Jun 2026 09:48:02 +0000MEDIUM 6.3: A vulnerability was detected in slackero phpwcms up to 1.9.45/1.10.8. The impacted element is an unknown function of the file include/inc_module/mod_feedimport/inc/processing.inc.php of the component Feedimport Module. Performing manipulation of the argument cnt_text results in deserialization. The