https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-14580.htmlhttps://patchthecve.com/cve/CVE-2025-14580.htmlWed, 14 Oct 2026 13:10:00 +0000LOW 3.5: A security vulnerability has been detected in Qualitor up to 8.24.73. The impacted element is an unknown function of the file /Qualitor/html/bc/bcdocumento9/biblioteca/request/viewDocumento.php. Such manipulation of the argument cdscript leads to cross site scripting. It is possible to launch the athttps://patchthecve.com/cve/CVE-2025-5139.htmlhttps://patchthecve.com/cve/CVE-2025-5139.htmlWed, 17 Jun 2026 09:47:18 +0000MEDIUM 5.6: A vulnerability was found in Qualitor 8.20/8.24. It has been rated as critical. Affected by this issue is some unknown functionality of the file /html/ad/adconexaooffice365/request/testaConexaoOffice365.php of the component Office 365-type Connection Handler. The manipulation of the argument nmconexhttps://patchthecve.com/cve/CVE-2024-48360.htmlhttps://patchthecve.com/cve/CVE-2024-48360.htmlWed, 17 Jun 2026 07:58:27 +0000HIGH 7.5: Qualitor v8.24 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /request/viewValidacao.php.https://patchthecve.com/cve/CVE-2024-48359.htmlhttps://patchthecve.com/cve/CVE-2024-48359.htmlWed, 17 Jun 2026 07:58:27 +0000CRITICAL 9.8: Qualitor v8.24 was discovered to contain a remote code execution (RCE) vulnerability via the gridValoresPopHidden parameter.https://patchthecve.com/cve/CVE-2024-44849.htmlhttps://patchthecve.com/cve/CVE-2024-44849.htmlWed, 17 Jun 2026 07:53:10 +0000CRITICAL 9.8: Qualitor up to 8.24 is vulnerable to Remote Code Execution (RCE) via Arbitrary File Upload in checkAcesso.php.