https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-49709.htmlhttps://patchthecve.com/cve/CVE-2024-49709.htmlWed, 17 Jun 2026 08:00:19 +0000MEDIUM 4.4: Internet Starter, one of SoftCOM iKSORIS system modules, allows for setting an arbitrary session cookie value. An attacker with an access to user's browser might set such a cookie, wait until the user logs in and then use the same cookie to take over the account. Moreover, the system does not destrhttps://patchthecve.com/cve/CVE-2024-49708.htmlhttps://patchthecve.com/cve/CVE-2024-49708.htmlWed, 17 Jun 2026 08:00:19 +0000MEDIUM 5.4: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for setting delivery address with a malicious script, what causes the script to run in user's context.  This vulnerability https://patchthecve.com/cve/CVE-2024-49707.htmlhttps://patchthecve.com/cve/CVE-2024-49707.htmlWed, 17 Jun 2026 08:00:19 +0000MEDIUM 6.1: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for resetting user's password with a malicious script, what causes the script to run in user's context.  This vulnerabilhttps://patchthecve.com/cve/CVE-2024-49706.htmlhttps://patchthecve.com/cve/CVE-2024-49706.htmlWed, 17 Jun 2026 08:00:19 +0000MEDIUM 6.1: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Open Redirect attacks by including base64 encoded URLs in the target parameter sent in a POST request to one of the endpoints. This vulnerability has been patched in version 79.0https://patchthecve.com/cve/CVE-2024-49705.htmlhttps://patchthecve.com/cve/CVE-2024-49705.htmlWed, 17 Jun 2026 08:00:18 +0000MEDIUM 6.5: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to client-side Denial of Servise (DoS) attacks. An attacker might trick a user into using an URL with a d parameter set to an unhandled value. All the subsequent requests will not be accepted as the server returns an error messaghttps://patchthecve.com/cve/CVE-2024-13598.htmlhttps://patchthecve.com/cve/CVE-2024-13598.htmlWed, 17 Jun 2026 07:02:20 +0000MEDIUM 6.1: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. Using a functionality of creating new form fields one creates new parameters vulnerable to XSS attacks. A user tricked into filling such a form with a malicious script will run thhttps://patchthecve.com/cve/CVE-2024-10090.htmlhttps://patchthecve.com/cve/CVE-2024-10090.htmlWed, 17 Jun 2026 06:54:53 +0000MEDIUM 6.1: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for adding users with a malicious script, what causes the script to run in user's context.  This vulnerability has been https://patchthecve.com/cve/CVE-2024-10089.htmlhttps://patchthecve.com/cve/CVE-2024-10089.htmlWed, 17 Jun 2026 06:54:53 +0000MEDIUM 5.4: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Stored XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a form designed for changing user's data with a malicious script, what causes the script to run in user's context.  This vulnerability has https://patchthecve.com/cve/CVE-2024-10088.htmlhttps://patchthecve.com/cve/CVE-2024-10088.htmlWed, 17 Jun 2026 06:54:53 +0000MEDIUM 6.1: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might trick a user into filling a login form with a malicious script, what causes the script to run in user's context.  This vulnerability has been patched in version 7https://patchthecve.com/cve/CVE-2024-10087.htmlhttps://patchthecve.com/cve/CVE-2024-10087.htmlWed, 17 Jun 2026 06:54:53 +0000MEDIUM 5.4: Internet Starter, one of SoftCOM iKSORIS system modules, is vulnerable to Reflected XSS (Cross-site Scripting) attacks. An attacker might craft a link containing a malicious script, which then gets directly embedded in references to other resources, what causes the script to run in user's context mu