<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: dropouts</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-36489: Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability </title><link>https://patchthecve.com/cve/CVE-2020-36489.html</link><guid>https://patchthecve.com/cve/CVE-2020-36489.html</guid><pubDate>Wed, 17 Jun 2026 03:15:35 +0000</pubDate><description>MEDIUM 5.4: Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the devicename parameter. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the devicename information.</description></item><item><title>CVE-2020-23061: Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the </title><link>https://patchthecve.com/cve/CVE-2020-23061.html</link><guid>https://patchthecve.com/cve/CVE-2020-23061.html</guid><pubDate>Wed, 17 Jun 2026 03:04:31 +0000</pubDate><description>HIGH 7.5: Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain an issue in the path parameter of the `list` and `download` module which allows attackers to perform a directory traversal via a change to the path variable to request the local list command.</description></item><item><title>CVE-2020-23042: Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerabi</title><link>https://patchthecve.com/cve/CVE-2020-23042.html</link><guid>https://patchthecve.com/cve/CVE-2020-23042.html</guid><pubDate>Wed, 17 Jun 2026 03:04:30 +0000</pubDate><description>MEDIUM 6.1: Dropouts Technologies LLP Super Backup v2.0.5 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request.</description></item><item><title>CVE-2020-23041: Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability </title><link>https://patchthecve.com/cve/CVE-2020-23041.html</link><guid>https://patchthecve.com/cve/CVE-2020-23041.html</guid><pubDate>Wed, 17 Jun 2026 03:04:30 +0000</pubDate><description>MEDIUM 6.1: Dropouts Technologies LLP Air Share v1.2 was discovered to contain a cross-site scripting (XSS) vulnerability in the path parameter of the `list` and `download` exception-handling. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted GET request.</description></item></channel></rss>