<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: transfer.sh</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-40931: dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS).</title><link>https://patchthecve.com/cve/CVE-2022-40931.html</link><guid>https://patchthecve.com/cve/CVE-2022-40931.html</guid><pubDate>Wed, 17 Jun 2026 05:02:15 +0000</pubDate><description>MEDIUM 6.1: dutchcoders Transfer.sh 1.4.0 is vulnerable to Cross Site Scripting (XSS).</description></item><item><title>CVE-2021-33497: Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files.</title><link>https://patchthecve.com/cve/CVE-2021-33497.html</link><guid>https://patchthecve.com/cve/CVE-2021-33497.html</guid><pubDate>Wed, 17 Jun 2026 03:54:40 +0000</pubDate><description>CRITICAL 9.1: Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files.</description></item><item><title>CVE-2021-33496: Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.</title><link>https://patchthecve.com/cve/CVE-2021-33496.html</link><guid>https://patchthecve.com/cve/CVE-2021-33496.html</guid><pubDate>Wed, 17 Jun 2026 03:54:40 +0000</pubDate><description>MEDIUM 6.1: Dutchcoders transfer.sh before 1.2.4 allows XSS via an inline view.</description></item></channel></rss>