https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2018-20138.htmlhttps://patchthecve.com/cve/CVE-2018-20138.htmlWed, 17 Jun 2026 01:52:19 +0000MEDIUM 5.4: PHP Scripts Mall Entrepreneur B2B Script 3.0.6 allows Stored XSS via Account Settings fields such as FirstName and LastName, a similar issue to CVE-2018-14541.https://patchthecve.com/cve/CVE-2018-14541.htmlhttps://patchthecve.com/cve/CVE-2018-14541.htmlWed, 17 Jun 2026 01:41:10 +0000MEDIUM 5.4: PHP Scripts Mall Basic B2B Script 2.0.0 has Reflected and Stored XSS via the First name, Last name, Address 1, City, State, and Company name fields.https://patchthecve.com/cve/CVE-2017-15985.htmlhttps://patchthecve.com/cve/CVE-2017-15985.htmlWed, 17 Jun 2026 01:08:35 +0000CRITICAL 9.8: Basic B2B Script allows SQL Injection via the product_view1.php pid or id parameter.