PatchTheCVE: steelcasehttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-7057: RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.https://patchthecve.com/cve/CVE-2018-7057.htmlhttps://patchthecve.com/cve/CVE-2018-7057.htmlWed, 17 Jun 2026 02:02:36 +0000MEDIUM 6.1: RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.CVE-2018-7056: RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresseshttps://patchthecve.com/cve/CVE-2018-7056.htmlhttps://patchthecve.com/cve/CVE-2018-7056.htmlWed, 17 Jun 2026 02:02:35 +0000MEDIUM 5.3: RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.CVE-2018-7055: GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.https://patchthecve.com/cve/CVE-2018-7055.htmlhttps://patchthecve.com/cve/CVE-2018-7055.htmlWed, 17 Jun 2026 02:02:35 +0000HIGH 7.5: GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.