https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-30883.htmlhttps://patchthecve.com/cve/CVE-2024-30883.htmlWed, 17 Jun 2026 07:27:28 +0000MEDIUM 4.7: Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the aspectRatio parameter in the image cropping function.https://patchthecve.com/cve/CVE-2024-30880.htmlhttps://patchthecve.com/cve/CVE-2024-30880.htmlWed, 17 Jun 2026 07:27:28 +0000MEDIUM 5.4: Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the multiple parameter in the image cropping function.https://patchthecve.com/cve/CVE-2024-30879.htmlhttps://patchthecve.com/cve/CVE-2024-30879.htmlWed, 17 Jun 2026 07:27:28 +0000MEDIUM 6.1: Reflected Cross Site Scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the boxId parameter in the image cropping function.https://patchthecve.com/cve/CVE-2024-30878.htmlhttps://patchthecve.com/cve/CVE-2024-30878.htmlWed, 17 Jun 2026 07:27:28 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in RageFrame2 v2.6.43, allows remote attackers to execute arbitrary web scripts or HTML and obtain sensitive information via a crafted payload injected into the upload_drive parameter.