PatchTheCVE: x3cmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2014-8772: Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote auhttps://patchthecve.com/cve/CVE-2014-8772.htmlhttps://patchthecve.com/cve/CVE-2014-8772.htmlWed, 17 Jun 2026 00:17:22 +0000LOW 3.5: Cross-site scripting (XSS) vulnerability in the search_controller in X3 CMS 0.5.1 and 0.5.1.1 allows remote authenticated users to inject arbitrary web script or HTML via the search parameter.CVE-2014-8771: Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allowhttps://patchthecve.com/cve/CVE-2014-8771.htmlhttps://patchthecve.com/cve/CVE-2014-8771.htmlWed, 17 Jun 2026 00:17:22 +0000MEDIUM 6.8: Multiple cross-site request forgery (CSRF) vulnerabilities in the admin area in X3 CMS 0.5.1 and 0.5.1.1 allow remote attackers to hijack the authentication of administrators via unspecified vectors.CVE-2011-5255: Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote https://patchthecve.com/cve/CVE-2011-5255.htmlhttps://patchthecve.com/cve/CVE-2011-5255.htmlTue, 16 Jun 2026 23:36:13 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in admin/login in X3 CMS 0.4.3.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO, (2) username, or (3) password parameter.