https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3964.htmlhttps://patchthecve.com/cve/CVE-2025-3964.htmlWed, 17 Jun 2026 09:21:00 +0000MEDIUM 4.3: A vulnerability, which was classified as problematic, was found in withstars Books-Management-System 1.0. Affected is an unknown function of the file /api/article/del of the component Article Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely.https://patchthecve.com/cve/CVE-2025-3963.htmlhttps://patchthecve.com/cve/CVE-2025-3963.htmlWed, 17 Jun 2026 09:21:00 +0000HIGH 7.3: A vulnerability, which was classified as critical, has been found in withstars Books-Management-System 1.0. This issue affects some unknown processing of the file /admin/article/list of the component Background Interface. The manipulation leads to missing authorization. The attack may be initiated rhttps://patchthecve.com/cve/CVE-2025-3962.htmlhttps://patchthecve.com/cve/CVE-2025-3962.htmlWed, 17 Jun 2026 09:21:00 +0000LOW 3.5: A vulnerability classified as problematic was found in withstars Books-Management-System 1.0. This vulnerability affects unknown code of the file /api/comment/add of the component Comment Handler. The manipulation of the argument content leads to cross site scripting. The attack can be initiated remhttps://patchthecve.com/cve/CVE-2025-3961.htmlhttps://patchthecve.com/cve/CVE-2025-3961.htmlWed, 17 Jun 2026 09:21:00 +0000LOW 3.5: A vulnerability classified as problematic has been found in withstars Books-Management-System 1.0. This affects an unknown part of the file /admin/article/add/do. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has beehttps://patchthecve.com/cve/CVE-2025-3960.htmlhttps://patchthecve.com/cve/CVE-2025-3960.htmlWed, 17 Jun 2026 09:21:00 +0000HIGH 7.3: A vulnerability was found in withstars Books-Management-System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /allreaders.html of the component Background Interface. The manipulation leads to missing authorization. The attack may be launched remohttps://patchthecve.com/cve/CVE-2025-3959.htmlhttps://patchthecve.com/cve/CVE-2025-3959.htmlWed, 17 Jun 2026 09:21:00 +0000MEDIUM 4.3: A vulnerability was found in withstars Books-Management-System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /reader_delete.html. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit https://patchthecve.com/cve/CVE-2025-3958.htmlhttps://patchthecve.com/cve/CVE-2025-3958.htmlWed, 17 Jun 2026 09:20:59 +0000LOW 3.5: A vulnerability was found in withstars Books-Management-System 1.0. It has been classified as problematic. Affected is an unknown function of the file /book_edit_do.html of the component Book Edit Page. The manipulation of the argument Name leads to cross site scripting. It is possible to launch the