<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: oc-server3 project</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2022-4587: A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3</title><link>https://patchthecve.com/cve/CVE-2022-4587.html</link><guid>https://patchthecve.com/cve/CVE-2022-4587.html</guid><pubDate>Wed, 17 Jun 2026 05:21:16 +0000</pubDate><description>MEDIUM 4.3: A vulnerability, which was classified as problematic, has been found in Opencaching Deutschland oc-server3. This issue affects some unknown processing of the file htdocs/templates2/ocstyle/login.tpl of the component Login Page. The manipulation of the argument username leads to cross site scripting.</description></item><item><title>CVE-2022-4586: A vulnerability classified as problematic was found in Opencaching Deutschland oc-server3</title><link>https://patchthecve.com/cve/CVE-2022-4586.html</link><guid>https://patchthecve.com/cve/CVE-2022-4586.html</guid><pubDate>Wed, 17 Jun 2026 05:21:16 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic was found in Opencaching Deutschland oc-server3. This vulnerability affects unknown code of the file htdocs/templates2/ocstyle/cachelists.tpl of the component Cachelist Handler. The manipulation of the argument name_filter/by_filter leads to cross site scrip</description></item><item><title>CVE-2022-4585: A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3</title><link>https://patchthecve.com/cve/CVE-2022-4585.html</link><guid>https://patchthecve.com/cve/CVE-2022-4585.html</guid><pubDate>Wed, 17 Jun 2026 05:21:16 +0000</pubDate><description>LOW 3.5: A vulnerability classified as problematic has been found in Opencaching Deutschland oc-server3. This affects an unknown part of the file htdocs/templates2/ocstyle/start.tpl of the component Cookie Handler. The manipulation of the argument usercountryCode leads to cross site scripting. It is possible</description></item></channel></rss>