https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-10229.htmlhttps://patchthecve.com/cve/CVE-2020-10229.htmlWed, 17 Jun 2026 02:47:31 +0000HIGH 8.8: A CSRF issue in vtecrm vtenext 19 CE allows attackers to carry out unwanted actions on an administrator's behalf, such as uploading files, adding users, and deleting accounts.https://patchthecve.com/cve/CVE-2020-10228.htmlhttps://patchthecve.com/cve/CVE-2020-10228.htmlWed, 17 Jun 2026 02:47:31 +0000HIGH 8.8: A file upload vulnerability in vtecrm vtenext 19 CE allows authenticated users to upload files with a .pht extension, resulting in remote code execution.https://patchthecve.com/cve/CVE-2020-10227.htmlhttps://patchthecve.com/cve/CVE-2020-10227.htmlWed, 17 Jun 2026 02:47:31 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the messages module of vtecrm vtenext 19 CE allows attackers to inject arbitrary JavaScript code via the From field of an email.