PatchTheCVE: webporthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-18668: Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcallhttps://patchthecve.com/cve/CVE-2020-18668.htmlhttps://patchthecve.com/cve/CVE-2020-18668.htmlWed, 17 Jun 2026 02:59:23 +0000MEDIUM 5.4: Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.CVE-2020-18667: SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.https://patchthecve.com/cve/CVE-2020-18667.htmlhttps://patchthecve.com/cve/CVE-2020-18667.htmlWed, 17 Jun 2026 02:59:23 +0000CRITICAL 9.8: SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.CVE-2020-18665: Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.https://patchthecve.com/cve/CVE-2020-18665.htmlhttps://patchthecve.com/cve/CVE-2020-18665.htmlWed, 17 Jun 2026 02:59:23 +0000MEDIUM 5.3: Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.CVE-2020-18664: Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.https://patchthecve.com/cve/CVE-2020-18664.htmlhttps://patchthecve.com/cve/CVE-2020-18664.htmlWed, 17 Jun 2026 02:59:23 +0000MEDIUM 5.4: Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.CVE-2020-23659: WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.https://patchthecve.com/cve/CVE-2020-23659.htmlhttps://patchthecve.com/cve/CVE-2020-23659.htmlWed, 17 Jun 2026 03:04:54 +0000MEDIUM 5.4: WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.CVE-2019-12461: Web Port 1.19.1 allows XSS via the /log type parameter.https://patchthecve.com/cve/CVE-2019-12461.htmlhttps://patchthecve.com/cve/CVE-2019-12461.htmlWed, 17 Jun 2026 02:14:42 +0000MEDIUM 6.1: Web Port 1.19.1 allows XSS via the /log type parameter.CVE-2019-12460: Web Port 1.19.1 allows XSS via the /access/setup type parameter.https://patchthecve.com/cve/CVE-2019-12460.htmlhttps://patchthecve.com/cve/CVE-2019-12460.htmlWed, 17 Jun 2026 02:14:42 +0000MEDIUM 6.1: Web Port 1.19.1 allows XSS via the /access/setup type parameter.