PatchTheCVE: fourkitchenshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2016-3144: Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows rehttps://patchthecve.com/cve/CVE-2016-3144.htmlhttps://patchthecve.com/cve/CVE-2016-3144.htmlWed, 17 Jun 2026 00:45:10 +0000MEDIUM 5.4: Cross-site scripting (XSS) vulnerability in the Block Class module 7.x-2.x before 7.x-2.2 for Drupal allows remote authenticated users with the "Administer block classes" permission to inject arbitrary web script or HTML via a class name.CVE-2012-1658: Cross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for Drupal allowshttps://patchthecve.com/cve/CVE-2012-1658.htmlhttps://patchthecve.com/cve/CVE-2012-1658.htmlTue, 16 Jun 2026 23:40:01 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in the Read More Link module 6.x-3.x before 6.x-3.1 for Drupal allows remote authenticated users with the access administration pages permission to inject arbitrary web script or HTML via unspecified vectors.CVE-2012-1657: Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drhttps://patchthecve.com/cve/CVE-2012-1657.htmlhttps://patchthecve.com/cve/CVE-2012-1657.htmlTue, 16 Jun 2026 23:40:01 +0000LOW 2.1: Cross-site scripting (XSS) vulnerability in block_class.module in the Block Class module before 7.x-1.1 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via the class name.