https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-10332.htmlhttps://patchthecve.com/cve/CVE-2025-10332.htmlWed, 17 Jun 2026 08:28:08 +0000LOW 3.5: A vulnerability was found in cdevroe unmark up to 1.9.3. Impacted is an unknown function of the file application/views/marks/info.php. Performing manipulation of the argument Title results in cross site scripting. The attack is possible to be carried out remotely. The exploit has been made public anhttps://patchthecve.com/cve/CVE-2025-10331.htmlhttps://patchthecve.com/cve/CVE-2025-10331.htmlWed, 17 Jun 2026 08:28:08 +0000LOW 3.5: A vulnerability has been found in cdevroe unmark up to 1.9.3. This issue affects some unknown processing of the file /application/controllers/Marks.php. Such manipulation of the argument Title leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed to the phttps://patchthecve.com/cve/CVE-2025-10330.htmlhttps://patchthecve.com/cve/CVE-2025-10330.htmlWed, 17 Jun 2026 08:28:08 +0000MEDIUM 4.3: A flaw has been found in cdevroe unmark up to 1.9.3. This vulnerability affects unknown code of the file application/views/layouts/topbar/searchform.php. This manipulation of the argument q causes cross site scripting. Remote exploitation of the attack is possible. The exploit has been published andhttps://patchthecve.com/cve/CVE-2025-10329.htmlhttps://patchthecve.com/cve/CVE-2025-10329.htmlWed, 17 Jun 2026 08:28:07 +0000MEDIUM 6.3: A vulnerability was detected in cdevroe unmark up to 1.9.3. This affects an unknown part of the file /application/controllers/Marks.php. The manipulation of the argument url results in server-side request forgery. The attack may be launched remotely. The exploit is now public and may be used. The vehttps://patchthecve.com/cve/CVE-2024-41349.htmlhttps://patchthecve.com/cve/CVE-2024-41349.htmlWed, 17 Jun 2026 07:47:37 +0000MEDIUM 6.1: unmark 1.9.2 is vulnerable to Cross Site Scripting (XSS) via application/views/marks/add_by_url.php.