https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2019-14344.htmlhttps://patchthecve.com/cve/CVE-2019-14344.htmlWed, 17 Jun 2026 02:18:14 +0000MEDIUM 6.1: TemaTres 3.0 has reflected XSS via the replace_string or search_string parameter to the vocab/admin.php?doAdmin=bulkReplace URI.https://patchthecve.com/cve/CVE-2019-14345.htmlhttps://patchthecve.com/cve/CVE-2019-14345.htmlWed, 17 Jun 2026 02:18:14 +0000CRITICAL 9.8: TemaTres 3.0 allows remote unprivileged users to create an administrator accounthttps://patchthecve.com/cve/CVE-2019-14343.htmlhttps://patchthecve.com/cve/CVE-2019-14343.htmlWed, 17 Jun 2026 02:18:14 +0000MEDIUM 5.4: TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabulario_id=list URI.