https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-19914.htmlhttps://patchthecve.com/cve/CVE-2020-19914.htmlWed, 17 Jun 2026 03:00:01 +0000MEDIUM 6.1: Cross Site Scripting (XSS) in xiunobbs 4.0.4 allows remote attackers to execute arbitrary web script or HTML via the attachment upload function.https://patchthecve.com/cve/CVE-2020-21496.htmlhttps://patchthecve.com/cve/CVE-2020-21496.htmlWed, 17 Jun 2026 03:03:43 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitebrief parameter.https://patchthecve.com/cve/CVE-2020-21495.htmlhttps://patchthecve.com/cve/CVE-2020-21495.htmlWed, 17 Jun 2026 03:03:43 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the component /admin/?setting-base.htm of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via the sitename parameter.https://patchthecve.com/cve/CVE-2020-21494.htmlhttps://patchthecve.com/cve/CVE-2020-21494.htmlWed, 17 Jun 2026 03:03:43 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in the component install\install.sql of Xiuno BBS 4.0.4 allows attackers to execute arbitrary web scripts or HTML via changing the doctype value to 0.https://patchthecve.com/cve/CVE-2020-21493.htmlhttps://patchthecve.com/cve/CVE-2020-21493.htmlWed, 17 Jun 2026 03:03:43 +0000MEDIUM 5.3: An issue in the component route\user.php of Xiuno BBS v4.0.4 allows attackers to enumerate usernames.