PatchTheCVE: waimai super cms projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-21506: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Cohttps://patchthecve.com/cve/CVE-2020-21506.htmlhttps://patchthecve.com/cve/CVE-2020-21506.htmlWed, 17 Jun 2026 03:03:44 +0000MEDIUM 6.1: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?m=Config&a=add.CVE-2020-21505: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Linkhttps://patchthecve.com/cve/CVE-2020-21505.htmlhttps://patchthecve.com/cve/CVE-2020-21505.htmlWed, 17 Jun 2026 03:03:44 +0000MEDIUM 6.1: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php/Link/addsave.CVE-2020-21504: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Phttps://patchthecve.com/cve/CVE-2020-21504.htmlhttps://patchthecve.com/cve/CVE-2020-21504.htmlWed, 17 Jun 2026 03:03:44 +0000MEDIUM 6.1: waimai Super Cms 20150505 contains a cross-site scripting (XSS) vulnerability in the component /admin.php?&m=Public&a=login.CVE-2020-21503: waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by obhttps://patchthecve.com/cve/CVE-2020-21503.htmlhttps://patchthecve.com/cve/CVE-2020-21503.htmlWed, 17 Jun 2026 03:03:43 +0000HIGH 7.5: waimai Super Cms 20150505 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture. By setting the index.php?m=gift&a=addsave credit parameter to -1, the product is sold for free.