PatchTheCVE: purchase order management projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-29623: Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability https://patchthecve.com/cve/CVE-2023-29623.htmlhttps://patchthecve.com/cve/CVE-2023-29623.htmlWed, 17 Jun 2026 05:50:36 +0000MEDIUM 6.1: Purchase Order Management v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the password parameter at /purchase_order/classes/login.php.CVE-2023-29622: Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password paramehttps://patchthecve.com/cve/CVE-2023-29622.htmlhttps://patchthecve.com/cve/CVE-2023-29622.htmlWed, 17 Jun 2026 05:50:36 +0000CRITICAL 9.8: Purchase Order Management v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /purchase_order/admin/login.php.CVE-2023-29621: Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows ahttps://patchthecve.com/cve/CVE-2023-29621.htmlhttps://patchthecve.com/cve/CVE-2023-29621.htmlWed, 17 Jun 2026 05:50:36 +0000HIGH 8.8: Purchase Order Management v1.0 was discovered to contain an arbitrary file upload vulnerability which allows attackers to execute arbitrary code via a crafted file uploaded to the server.