https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-6541.htmlhttps://patchthecve.com/cve/CVE-2017-6541.htmlWed, 17 Jun 2026 01:22:32 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/viewtest.php URL. An attacker could execute arbitrary HTML and script code ihttps://patchthecve.com/cve/CVE-2017-6540.htmlhttps://patchthecve.com/cve/CVE-2017-6540.htmlWed, 17 Jun 2026 01:22:31 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (configs) passed to the webpagetest-master/www/benchmarks/compare.php URL. An attacker could execute arbitrary HTML and script code in a browshttps://patchthecve.com/cve/CVE-2017-6539.htmlhttps://patchthecve.com/cve/CVE-2017-6539.htmlWed, 17 Jun 2026 01:22:31 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, time) passed to the webpagetest-master/www/benchmarks/delta.php URL. An attacker could execute arbitrary HTML and script code in ahttps://patchthecve.com/cve/CVE-2017-6538.htmlhttps://patchthecve.com/cve/CVE-2017-6538.htmlWed, 17 Jun 2026 01:22:31 +0000MEDIUM 6.1: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (video) passed to the webpagetest-master/www/speedindex/index.php URL. An attacker could execute arbitrary HTML and script code in a browser in the conthttps://patchthecve.com/cve/CVE-2017-6537.htmlhttps://patchthecve.com/cve/CVE-2017-6537.htmlWed, 17 Jun 2026 01:22:31 +0000MEDIUM 6.1: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (bgcolor) passed to the webpagetest-master/www/video/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context https://patchthecve.com/cve/CVE-2017-6536.htmlhttps://patchthecve.com/cve/CVE-2017-6536.htmlWed, 17 Jun 2026 01:22:31 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (url, pssid) passed to the webpagetest-master/www/weblite.php URL. An attacker could execute arbitrary HTML and script code in a browser in thhttps://patchthecve.com/cve/CVE-2017-6535.htmlhttps://patchthecve.com/cve/CVE-2017-6535.htmlWed, 17 Jun 2026 01:22:31 +0000MEDIUM 6.1: Multiple Cross-Site Scripting (XSS) issues were discovered in webpagetest 3.0. The vulnerabilities exist due to insufficient filtration of user-supplied data (benchmark, url) passed to the webpagetest-master/www/benchmarks/trendurl.php URL. An attacker could execute arbitrary HTML and script code inhttps://patchthecve.com/cve/CVE-2017-6534.htmlhttps://patchthecve.com/cve/CVE-2017-6534.htmlWed, 17 Jun 2026 01:22:31 +0000MEDIUM 6.1: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (pssid) passed to the webpagetest-master/www/pss.php URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vuhttps://patchthecve.com/cve/CVE-2017-6533.htmlhttps://patchthecve.com/cve/CVE-2017-6533.htmlWed, 17 Jun 2026 01:22:31 +0000MEDIUM 6.1: A Cross-Site Scripting (XSS) issue was discovered in webpagetest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data (benchmark) passed to the webpagetest-master/www/benchmarks/view.php URL. An attacker could execute arbitrary HTML and script code in a browser in the chttps://patchthecve.com/cve/CVE-2017-6396.htmlhttps://patchthecve.com/cve/CVE-2017-6396.htmlWed, 17 Jun 2026 01:22:15 +0000MEDIUM 6.1: An issue was discovered in WPO-Foundation WebPageTest 3.0. The vulnerability exists due to insufficient filtration of user-supplied data passed to the "webpagetest-master/www/compare-cf.php" URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable w