https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-61417.htmlhttps://patchthecve.com/cve/CVE-2025-61417.htmlWed, 17 Jun 2026 09:50:30 +0000HIGH 8.8: Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to perhttps://patchthecve.com/cve/CVE-2024-44314.htmlhttps://patchthecve.com/cve/CVE-2024-44314.htmlWed, 17 Jun 2026 07:52:46 +0000MEDIUM 6.5: TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the Orders Management System, allowing unauthorized users to update order statuses. The issue occurs in the index_onUpdateStatus() function within Orders.php, which fails to verify if the user has permission to modify an order'https://patchthecve.com/cve/CVE-2024-44313.htmlhttps://patchthecve.com/cve/CVE-2024-44313.htmlWed, 17 Jun 2026 07:52:46 +0000HIGH 8.1: TastyIgniter 3.7.6 contains an Incorrect Access Control vulnerability in the invoice() function within Orders.php which allows unauthorized users to access and generate invoices due to missing permission checks.