CVE-2004-1213: Cross-site scripting (XSS) vulnerability in index.php in Advanced Guestbook 2.3.1, 2.2, and possibly other...

Security readout for executives and security teams

CVE-2004-1213 is an old cross-site scripting issue in Advanced Guestbook. If the affected guestbook is still publicly accessible, an attacker could cause a visitor’s browser to run injected script or HTML through the entry parameter. Exposure is most likely on legacy public websites still running Advanced Guestbook 2.3.1, 2.2, or similar unverified versions. Modern environments are exposed only if this application remains deployed. Prioritize this where legacy public websites remain online. The business risk is session or user trust compromise through browser-side script execution, but urgency depends on whether Advanced Guestbook is actually deployed. Mitigation focus: Identify any deployed Advanced Guestbook instances and versions.; Check maintainer or archival vendor guidance for a fixed version or advisory.; Remove or disable the guestbook if it is no longer needed..

Prepared

Jun 30, 2026, 01:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.