<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: rob loach</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2012-5545: Multiple cross-site scripting (XSS) vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2.5 for Drupal </title><link>https://patchthecve.com/cve/CVE-2012-5545.html</link><guid>https://patchthecve.com/cve/CVE-2012-5545.html</guid><pubDate>Tue, 16 Jun 2026 23:46:58 +0000</pubDate><description>LOW 2.1: Multiple cross-site scripting (XSS) vulnerabilities in the ShareThis module 7.x-2.x before 7.x-2.5 for Drupal allow remote authenticated users with the &quot;administer sharethis&quot; permission to inject arbitrary web script or HTML via unspecified vectors related to &quot;JavaScript settings.&quot;</description></item><item><title>CVE-2012-2077: Cross-site request forgery (CSRF) vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allo</title><link>https://patchthecve.com/cve/CVE-2012-2077.html</link><guid>https://patchthecve.com/cve/CVE-2012-2077.html</guid><pubDate>Tue, 16 Jun 2026 23:40:56 +0000</pubDate><description>MEDIUM 5.1: Cross-site request forgery (CSRF) vulnerability in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote attackers to hijack the authentication of users with administer sharethis permissions via unknown vectors &quot;outside of the Form API.&quot;</description></item><item><title>CVE-2012-2076: Cross-site scripting (XSS) vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.</title><link>https://patchthecve.com/cve/CVE-2012-2076.html</link><guid>https://patchthecve.com/cve/CVE-2012-2076.html</guid><pubDate>Tue, 16 Jun 2026 23:40:56 +0000</pubDate><description>LOW 2.1: Cross-site scripting (XSS) vulnerability in the administration forms in the ShareThis module 7.x-2.x before 7.x-2.3 for Drupal allows remote authenticated users with administer sharethis permissions to inject arbitrary web script or HTML via unspecified vectors.</description></item></channel></rss>