https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-2352.htmlhttps://patchthecve.com/cve/CVE-2025-2352.htmlWed, 17 Jun 2026 09:06:48 +0000LOW 2.4: A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/indexConfigs/save of the component Backend. The manipulation of the argument categoryName leads to cross site scripting. The attack may behttps://patchthecve.com/cve/CVE-2025-2089.htmlhttps://patchthecve.com/cve/CVE-2025-2089.htmlWed, 17 Jun 2026 09:06:18 +0000MEDIUM 5.4: A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerability is the function updateUserInfo of the file /personal/updateInfo of the component com.siro.mall.controller.mall.UserController. The manipulation of the argument userId leads to https://patchthecve.com/cve/CVE-2025-2087.htmlhttps://patchthecve.com/cve/CVE-2025-2087.htmlWed, 17 Jun 2026 09:06:16 +0000LOW 3.5: A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The exploit https://patchthecve.com/cve/CVE-2025-2086.htmlhttps://patchthecve.com/cve/CVE-2025-2086.htmlWed, 17 Jun 2026 09:06:16 +0000LOW 3.5: A vulnerability classified as problematic was found in StarSea99 starsea-mall 1.0. This vulnerability affects unknown code of the file /admin/indexConfigs/update. The manipulation of the argument redirectUrl leads to cross site scripting. The attack can be initiated remotely. The exploit has been dihttps://patchthecve.com/cve/CVE-2025-2085.htmlhttps://patchthecve.com/cve/CVE-2025-2085.htmlWed, 17 Jun 2026 09:06:16 +0000LOW 3.5: A vulnerability classified as problematic has been found in StarSea99 starsea-mall 1.0. This affects an unknown part of the file /admin/carousels/save. The manipulation of the argument redirectUrl leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been dishttps://patchthecve.com/cve/CVE-2025-0400.htmlhttps://patchthecve.com/cve/CVE-2025-0400.htmlWed, 17 Jun 2026 08:26:24 +0000LOW 2.4: A vulnerability was found in StarSea99 starsea-mall 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /admin/categories/update. The manipulation of the argument categoryName leads to cross site scripting. The attack may be initiated remotely. The exploit hhttps://patchthecve.com/cve/CVE-2025-0399.htmlhttps://patchthecve.com/cve/CVE-2025-0399.htmlWed, 17 Jun 2026 08:26:24 +0000MEDIUM 4.7: A vulnerability was found in StarSea99 starsea-mall 1.0. It has been declared as critical. This vulnerability affects the function UploadController of the file src/main/java/com/siro/mall/controller/common/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The