PatchTheCVE: rosariosishttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-2665: Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosihttps://patchthecve.com/cve/CVE-2023-2665.htmlhttps://patchthecve.com/cve/CVE-2023-2665.htmlWed, 17 Jun 2026 05:53:08 +0000HIGH 7.5: Storage of Sensitive Data in a Mechanism without Access Control in GitHub repository francoisjacquet/rosariosis prior to 11.0.CVE-2023-29918: RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.https://patchthecve.com/cve/CVE-2023-29918.htmlhttps://patchthecve.com/cve/CVE-2023-29918.htmlWed, 17 Jun 2026 05:51:03 +0000MEDIUM 5.4: RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module.CVE-2023-2202: Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.https://patchthecve.com/cve/CVE-2023-2202.htmlhttps://patchthecve.com/cve/CVE-2023-2202.htmlWed, 17 Jun 2026 05:51:58 +0000MEDIUM 6.5: Improper Access Control in GitHub repository francoisjacquet/rosariosis prior to 10.9.3.CVE-2023-0994: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prihttps://patchthecve.com/cve/CVE-2023-0994.htmlhttps://patchthecve.com/cve/CVE-2023-0994.htmlWed, 17 Jun 2026 05:26:50 +0000HIGH 7.5: Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository francoisjacquet/rosariosis prior to 10.8.2.CVE-2022-2714: Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 1https://patchthecve.com/cve/CVE-2022-2714.htmlhttps://patchthecve.com/cve/CVE-2022-2714.htmlWed, 17 Jun 2026 04:42:26 +0000CRITICAL 9.8: Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0.CVE-2022-3072: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3.https://patchthecve.com/cve/CVE-2022-3072.htmlhttps://patchthecve.com/cve/CVE-2022-3072.htmlWed, 17 Jun 2026 04:58:46 +0000MEDIUM 5.4: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 8.9.3.CVE-2022-2067: SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0.https://patchthecve.com/cve/CVE-2022-2067.htmlhttps://patchthecve.com/cve/CVE-2022-2067.htmlWed, 17 Jun 2026 04:41:13 +0000CRITICAL 9.1: SQL Injection in GitHub repository francoisjacquet/rosariosis prior to 9.0.CVE-2022-2036: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1.https://patchthecve.com/cve/CVE-2022-2036.htmlhttps://patchthecve.com/cve/CVE-2022-2036.htmlWed, 17 Jun 2026 04:41:10 +0000MEDIUM 5.4: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.1.CVE-2022-1997: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.https://patchthecve.com/cve/CVE-2022-1997.htmlhttps://patchthecve.com/cve/CVE-2022-1997.htmlWed, 17 Jun 2026 04:23:29 +0000MEDIUM 5.4: Cross-site Scripting (XSS) - Stored in GitHub repository francoisjacquet/rosariosis prior to 9.0.