PatchTheCVE: devsaranhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2013-1787: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 fhttps://patchthecve.com/cve/CVE-2013-1787.htmlhttps://patchthecve.com/cve/CVE-2013-1787.htmlTue, 16 Jun 2026 23:52:07 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Simple Corporate theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-1786: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupalhttps://patchthecve.com/cve/CVE-2013-1786.htmlhttps://patchthecve.com/cve/CVE-2013-1786.htmlTue, 16 Jun 2026 23:52:07 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Company theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-1785: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6https://patchthecve.com/cve/CVE-2013-1785.htmlhttps://patchthecve.com/cve/CVE-2013-1785.htmlTue, 16 Jun 2026 23:52:07 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Premium Responsive theme before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-1784: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupal ahttps://patchthecve.com/cve/CVE-2013-1784.htmlhttps://patchthecve.com/cve/CVE-2013-1784.htmlTue, 16 Jun 2026 23:52:06 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Clean Theme before 7.x-1.3 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-1783: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme bhttps://patchthecve.com/cve/CVE-2013-1783.htmlhttps://patchthecve.com/cve/CVE-2013-1783.htmlTue, 16 Jun 2026 23:52:06 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in page--front.tpl.php in the Business theme before 7.x-1.8 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-1782: Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allowshttps://patchthecve.com/cve/CVE-2013-1782.htmlhttps://patchthecve.com/cve/CVE-2013-1782.htmlTue, 16 Jun 2026 23:52:06 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the Responsive Blog Theme 7.x-1.x before 7.x-1.6 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.CVE-2013-1781: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Dhttps://patchthecve.com/cve/CVE-2013-1781.htmlhttps://patchthecve.com/cve/CVE-2013-1781.htmlTue, 16 Jun 2026 23:52:06 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Professional theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-1780: Cross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allowshttps://patchthecve.com/cve/CVE-2013-1780.htmlhttps://patchthecve.com/cve/CVE-2013-1780.htmlTue, 16 Jun 2026 23:52:06 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the Best Responsive Theme 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.CVE-2013-1779: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal ahttps://patchthecve.com/cve/CVE-2013-1779.htmlhttps://patchthecve.com/cve/CVE-2013-1779.htmlTue, 16 Jun 2026 23:52:06 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the 3 slide gallery in the Fresh theme before 7.x-1.4 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via unspecified vectors.CVE-2013-1778: Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remotehttps://patchthecve.com/cve/CVE-2013-1778.htmlhttps://patchthecve.com/cve/CVE-2013-1778.htmlTue, 16 Jun 2026 23:52:06 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the Creative Theme 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the administer themes permission to inject arbitrary web script or HTML via vectors related to social icons.CVE-2012-4497: Cross-site scripting (XSS) vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7https://patchthecve.com/cve/CVE-2012-4497.htmlhttps://patchthecve.com/cve/CVE-2012-4497.htmlTue, 16 Jun 2026 23:45:12 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the "3 slide gallery" in the Elegant Theme module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users with the "administer themes" permission to inject arbitrary web script or HTML via a slide URL.