PatchTheCVE: open source development networkhttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2004-2656: Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (https://patchthecve.com/cve/CVE-2004-2656.htmlhttps://patchthecve.com/cve/CVE-2004-2656.htmlTue, 16 Jun 2026 22:10:04 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) before R_2_5_0_41 allow remote attackers to inject arbitrary web script or HTML via (1) the topic parameter in search.pl and (2) the filter parameter in submit.pl.CVE-2002-1748: Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated https://patchthecve.com/cve/CVE-2002-1748.htmlhttps://patchthecve.com/cve/CVE-2002-1748.htmlTue, 16 Jun 2026 21:59:54 +0000HIGH 7.2: Unknown vulnerability in Slash 2.1.x and 2.2 through 2.2.2, as used in Slashcode, allows remote authenticated users to gain access to arbitrary accounts.CVE-2002-1681: Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote ahttps://patchthecve.com/cve/CVE-2002-1681.htmlhttps://patchthecve.com/cve/CVE-2002-1681.htmlTue, 16 Jun 2026 21:59:46 +0000MEDIUM 6.8: Cross-site scripting (XSS) vulnerability in Slashcode CVS releases June 17 through July 1 2002 allows remote attackers to execute arbitrary script as other users by injecting script into the paragraph <P> tag.CVE-2002-0292: Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote athttps://patchthecve.com/cve/CVE-2002-0292.htmlhttps://patchthecve.com/cve/CVE-2002-0292.htmlTue, 16 Jun 2026 21:57:09 +0000LOW 2.6: Cross-site scripting vulnerability in Slash before 2.2.5, as used in Slashcode and elsewhere, allows remote attackers to steal cookies and authentication information from other users via Javascript in a URL, possibly in the formkey field.CVE-2001-1535: Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtaihttps://patchthecve.com/cve/CVE-2001-1535.htmlhttps://patchthecve.com/cve/CVE-2001-1535.htmlTue, 16 Jun 2026 21:56:27 +0000MEDIUM 4.6: Slashcode 2.0 creates new accounts with an 8-character random password, which could allow local users to obtain session ID's from cookies and gain unauthorized access via a brute force attack.CVE-2000-1015: The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which ahttps://patchthecve.com/cve/CVE-2000-1015.htmlhttps://patchthecve.com/cve/CVE-2000-1015.htmlTue, 16 Jun 2026 21:52:58 +0000HIGH 7.5: The default configuration of Slashcode before version 2.0 Alpha has a default administrative password, which allows remote attackers to gain Slashcode privileges and possibly execute arbitrary commands.