<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: meta tags quick</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2014-9363: Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x befo</title><link>https://patchthecve.com/cve/CVE-2014-9363.html</link><guid>https://patchthecve.com/cve/CVE-2014-9363.html</guid><pubDate>Wed, 17 Jun 2026 00:18:10 +0000</pubDate><description>MEDIUM 5.5: Open redirect vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the destination parameter.</description></item><item><title>CVE-2014-9362: Cross-site scripting (XSS) vulnerability in the path-based meta tag editing form in the Meta tags quick module</title><link>https://patchthecve.com/cve/CVE-2014-9362.html</link><guid>https://patchthecve.com/cve/CVE-2014-9362.html</guid><pubDate>Wed, 17 Jun 2026 00:18:10 +0000</pubDate><description>LOW 3.5: Cross-site scripting (XSS) vulnerability in the path-based meta tag editing form in the Meta tags quick module 7.x-2.x before 7.x-2.8 for Drupal allows remote authenticated users with the &quot;Edit path based meta tags&quot; permission to inject arbitrary web script or HTML via vectors related to deleting a </description></item><item><title>CVE-2011-5030: Cross-site scripting (XSS) vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allow</title><link>https://patchthecve.com/cve/CVE-2011-5030.html</link><guid>https://patchthecve.com/cve/CVE-2011-5030.html</guid><pubDate>Tue, 16 Jun 2026 23:35:48 +0000</pubDate><description>LOW 3.5: Cross-site scripting (XSS) vulnerability in the Meta tags quick module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors, probably related to &quot;names of entity bundles.&quot;</description></item></channel></rss>