https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-13561.htmlhttps://patchthecve.com/cve/CVE-2025-13561.htmlThu, 08 Oct 2026 10:10:00 +0000HIGH 7.3: A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and https://patchthecve.com/cve/CVE-2025-13560.htmlhttps://patchthecve.com/cve/CVE-2025-13560.htmlSun, 18 Oct 2026 20:10:00 +0000HIGH 7.3: A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used.https://patchthecve.com/cve/CVE-2025-29710.htmlhttps://patchthecve.com/cve/CVE-2025-29710.htmlWed, 17 Jun 2026 09:05:36 +0000MEDIUM 6.1: SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting (XSS) via /dashboard/Services.https://patchthecve.com/cve/CVE-2025-29709.htmlhttps://patchthecve.com/cve/CVE-2025-29709.htmlWed, 17 Jun 2026 09:05:36 +0000CRITICAL 9.8: SourceCodester Company Website CMS 1.0 has a File upload vulnerability via the "Create portfolio" file /dashboard/portfolio.https://patchthecve.com/cve/CVE-2025-29708.htmlhttps://patchthecve.com/cve/CVE-2025-29708.htmlWed, 17 Jun 2026 09:05:36 +0000CRITICAL 9.8: SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services.