https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-21482.htmlhttps://patchthecve.com/cve/CVE-2020-21482.htmlWed, 17 Jun 2026 03:03:42 +0000MEDIUM 5.4: A cross-site scripting (XSS) vulnerability in RGCMS v1.06 allows attackers to obtain the administrator's cookie via a crafted payload in the Name field under the Message Board modulehttps://patchthecve.com/cve/CVE-2020-21481.htmlhttps://patchthecve.com/cve/CVE-2020-21481.htmlWed, 17 Jun 2026 03:03:42 +0000HIGH 7.2: An arbitrary file upload vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted .txt file which is later changed to a PHP file.https://patchthecve.com/cve/CVE-2020-21480.htmlhttps://patchthecve.com/cve/CVE-2020-21480.htmlWed, 17 Jun 2026 03:03:42 +0000HIGH 7.2: An arbitrary file write vulnerability in RGCMS v1.06 allows attackers to execute arbitrary code via a crafted PHP file.