PatchTheCVE: nancy wichmannhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2012-4500: The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access https://patchthecve.com/cve/CVE-2012-4500.htmlhttps://patchthecve.com/cve/CVE-2012-4500.htmlTue, 16 Jun 2026 23:45:12 +0000LOW 3.5: The Announcements module 6.x-1.x before 6.x-1.5 for Drupal allows remote authenticated users with the "access announcements" permission to bypass node access restrictions and possibly have other unspecified impact.CVE-2012-2298: Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal ahttps://patchthecve.com/cve/CVE-2012-2298.htmlhttps://patchthecve.com/cve/CVE-2012-2298.htmlTue, 16 Jun 2026 23:41:18 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in the RealName module 6.x-1.x before 6.x-1.5 for Drupal allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) "user names in page titles" and (2) "autocomplete callbacks."CVE-2012-2302: Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save locatiohttps://patchthecve.com/cve/CVE-2012-2302.htmlhttps://patchthecve.com/cve/CVE-2012-2302.htmlTue, 16 Jun 2026 23:41:19 +0000MEDIUM 5.0: Site Documentation (Sitedoc) module for Drupal 6.x-1.x before 6.x-1.4 does not properly check the save location when archiving, which allows remote attackers to obtain sensitive information via unspecified vectors.CVE-2012-2711: Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Druhttps://patchthecve.com/cve/CVE-2012-2711.htmlhttps://patchthecve.com/cve/CVE-2012-2711.htmlTue, 16 Jun 2026 23:41:55 +0000LOW 2.1: Multiple cross-site scripting (XSS) vulnerabilities in the Taxonomy List module 6.x-1.x before 6.x-1.4 for Drupal allow remote authenticated users with create or edit taxonomy terms permissions to inject arbitrary web script or HTML via vectors related to taxonomy information.CVE-2012-2339: Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remothttps://patchthecve.com/cve/CVE-2012-2339.htmlhttps://patchthecve.com/cve/CVE-2012-2339.htmlTue, 16 Jun 2026 23:41:23 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the Glossary module 6.x-1.x before 6.x-1.8 for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "taxonomy information."CVE-2009-4524: Cross-site scripting (XSS) vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remothttps://patchthecve.com/cve/CVE-2009-4524.htmlhttps://patchthecve.com/cve/CVE-2009-4524.htmlTue, 16 Jun 2026 23:13:49 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in the RealName module 6.x-1.x before 6.x-1.3 for Drupal allows remote attackers to inject arbitrary web script or HTML via a realname (aka real name) element.