https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-50849.htmlhttps://patchthecve.com/cve/CVE-2024-50849.htmlWed, 17 Jun 2026 08:05:07 +0000MEDIUM 4.8: A Stored Cross-Site Scripting (XSS) vulnerability in the "Rules" functionality of WorldServer v11.8.2 allows a remote authenticated attacker to execute arbitrary JavaScript code.https://patchthecve.com/cve/CVE-2024-50848.htmlhttps://patchthecve.com/cve/CVE-2024-50848.htmlWed, 17 Jun 2026 08:05:07 +0000MEDIUM 6.5: An XML External Entity (XXE) vulnerability in the Import object and Translation Memory import functionalities of WorldServer v11.8.2 to access sensitive information and execute arbitrary commands via supplying a crafted .tmx file.https://patchthecve.com/cve/CVE-2024-43025.htmlhttps://patchthecve.com/cve/CVE-2024-43025.htmlWed, 17 Jun 2026 07:50:16 +0000MEDIUM 6.1: An HTML injection vulnerability in RWS MultiTrans v7.0.23324.2 and earlier allows attackers to alter the HTML-layout and possibly execute a phishing attack via a crafted payload injected into a sent e-mail.https://patchthecve.com/cve/CVE-2024-43024.htmlhttps://patchthecve.com/cve/CVE-2024-43024.htmlWed, 17 Jun 2026 07:50:16 +0000MEDIUM 6.1: Multiple stored cross-site scripting (XSS) vulnerabilities in RWS MultiTrans v7.0.23324.2 and earlier allow attackers to execute arbitrary web scripts or HTML via a crafted payload.