PatchTheCVE: sitrackerhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2019-20223: In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this pahttps://patchthecve.com/cve/CVE-2019-20223.htmlhttps://patchthecve.com/cve/CVE-2019-20223.htmlWed, 17 Jun 2026 02:30:13 +0000MEDIUM 6.1: In Support Incident Tracker (SiT!) 3.67, the id parameter is affected by XSS on all endpoints that use this parameter, a related issue to CVE-2012-2235.CVE-2019-20222: In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.https://patchthecve.com/cve/CVE-2019-20222.htmlhttps://patchthecve.com/cve/CVE-2019-20222.htmlWed, 17 Jun 2026 02:30:13 +0000MEDIUM 6.1: In Support Incident Tracker (SiT!) 3.67, the Short Application Name and Application Name inputs in the config.php page are affected by XSS.CVE-2019-20221: In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSShttps://patchthecve.com/cve/CVE-2019-20221.htmlhttps://patchthecve.com/cve/CVE-2019-20221.htmlWed, 17 Jun 2026 02:30:13 +0000MEDIUM 6.1: In Support Incident Tracker (SiT!) 3.67, Load Plugins input in the config.php page is affected by XSS. The XSS payload is, for example, executed on the about.php page.CVE-2019-20220: In Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced.php page is https://patchthecve.com/cve/CVE-2019-20220.htmlhttps://patchthecve.com/cve/CVE-2019-20220.htmlWed, 17 Jun 2026 02:30:13 +0000MEDIUM 6.1: In Support Incident Tracker (SiT!) 3.67, the search_id parameter in the search_incidents_advanced.php page is affected by XSS.