https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2015-5500.htmlhttps://patchthecve.com/cve/CVE-2015-5500.htmlWed, 17 Jun 2026 00:29:14 +0000LOW 3.5: Cross-site scripting (XSS) vulnerability in the Navigate module for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.https://patchthecve.com/cve/CVE-2015-5499.htmlhttps://patchthecve.com/cve/CVE-2015-5499.htmlWed, 17 Jun 2026 00:29:13 +0000MEDIUM 4.0: The Navigate module for Drupal does not properly check permissions, which allows remote authenticated users to modify custom widgets and create widget database records by leveraging the "navigate view" permission.https://patchthecve.com/cve/CVE-2015-2101.htmlhttps://patchthecve.com/cve/CVE-2015-2101.htmlWed, 17 Jun 2026 00:23:36 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.