<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: abcd-community</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-8411: A vulnerability was determined in ABCD ABCD2 up to 2.2.0-beta-1</title><link>https://patchthecve.com/cve/CVE-2024-8411.html</link><guid>https://patchthecve.com/cve/CVE-2024-8411.html</guid><pubDate>Wed, 17 Jun 2026 08:22:31 +0000</pubDate><description>LOW 3.5: A vulnerability was determined in ABCD ABCD2 up to 2.2.0-beta-1. Impacted is an unknown function of the file /buscar_integrada.php. Executing a manipulation of the argument Sub_Expresion can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly dis</description></item><item><title>CVE-2024-8410: A vulnerability classified as problematic was found in ABCD ABCD2 up to 2.2.0-beta-1</title><link>https://patchthecve.com/cve/CVE-2024-8410.html</link><guid>https://patchthecve.com/cve/CVE-2024-8410.html</guid><pubDate>Wed, 17 Jun 2026 08:22:31 +0000</pubDate><description>MEDIUM 4.3: A vulnerability classified as problematic was found in ABCD ABCD2 up to 2.2.0-beta-1. This vulnerability affects unknown code of the file /abcd/opac/php/otros_sitios.php. The manipulation of the argument sitio leads to path traversal. The attack can be initiated remotely. The exploit has been disclo</description></item><item><title>CVE-2024-8409: A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1</title><link>https://patchthecve.com/cve/CVE-2024-8409.html</link><guid>https://patchthecve.com/cve/CVE-2024-8409.html</guid><pubDate>Wed, 17 Jun 2026 08:22:31 +0000</pubDate><description>MEDIUM 4.3: A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part of the file /common/show_image.php. The manipulation of the argument image leads to path traversal: &#x27;../filedir&#x27;. It is possible to initiate the attack remotely. The exploit has be</description></item></channel></rss>