https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-38545.htmlhttps://patchthecve.com/cve/CVE-2022-38545.htmlWed, 17 Jun 2026 04:56:48 +0000CRITICAL 9.6: Valine v1.4.18 was discovered to contain a remote code execution (RCE) vulnerability which allows attackers to execute arbitrary code via a crafted POST request.https://patchthecve.com/cve/CVE-2020-28847.htmlhttps://patchthecve.com/cve/CVE-2020-28847.htmlWed, 17 Jun 2026 03:10:44 +0000MEDIUM 5.4: Cross Site Scripting (XSS) vulnerability in xCss Valine v1.4.14 via the nick parameter to /classes/Comment.https://patchthecve.com/cve/CVE-2021-34801.htmlhttps://patchthecve.com/cve/CVE-2021-34801.htmlWed, 17 Jun 2026 03:56:35 +0000MEDIUM 5.3: Valine 1.4.14 allows remote attackers to cause a denial of service (application outage) by supplying a ua (aka User-Agent) value that only specifies the product and version.