<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: onethird</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2020-5640: Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker</title><link>https://patchthecve.com/cve/CVE-2020-5640.html</link><guid>https://patchthecve.com/cve/CVE-2020-5640.html</guid><pubDate>Wed, 17 Jun 2026 03:21:44 +0000</pubDate><description>CRITICAL 9.8: Local file inclusion vulnerability in OneThird CMS v1.96c and earlier allows a remote unauthenticated attacker to execute arbitrary code or obtain sensitive information via unspecified vectors.</description></item><item><title>CVE-2017-2124: Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven&#x27;s Door and earlier allows remote attackers to </title><link>https://patchthecve.com/cve/CVE-2017-2124.html</link><guid>https://patchthecve.com/cve/CVE-2017-2124.html</guid><pubDate>Wed, 17 Jun 2026 01:15:35 +0000</pubDate><description>MEDIUM 6.1: Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven&#x27;s Door and earlier allows remote attackers to inject arbitrary web script or HTML via contact.php.</description></item><item><title>CVE-2017-2123: Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven&#x27;s Door and earlier allows remote attackers to </title><link>https://patchthecve.com/cve/CVE-2017-2123.html</link><guid>https://patchthecve.com/cve/CVE-2017-2123.html</guid><pubDate>Wed, 17 Jun 2026 01:15:35 +0000</pubDate><description>MEDIUM 6.1: Cross-site scripting vulnerability in OneThird CMS v1.73 Heaven&#x27;s Door and earlier allows remote attackers to inject arbitrary web script or HTML via language.php.</description></item></channel></rss>