CVE-2007-0973: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Jupiter CMS 1.1.5 allow remote attacker...

Security readout for executives and security teams

CVE-2007-0973 is a historical cross-site scripting issue in Jupiter CMS 1.1.5. A remote attacker could place script or HTML in HTTP headers that may later be shown to an administrator during a Logged Guest action. Business risk depends on whether this legacy CMS is still deployed. Exposure appears limited to Jupiter CMS 1.1.5 installations, especially internet-facing legacy sites where administrators use Logged Guest functionality. The bundle's affected product fields are incomplete, so asset inventory should validate product and version directly. Treat as a legacy exposure cleanup item unless Jupiter CMS 1.1.5 is still in use. If present on an internet-facing site, prioritize replacement or isolation because the software is old and the sources do not identify a current patch path. Mitigation focus: Inventory and retire Jupiter CMS 1.1.5 where possible.; Check vendor or archived project guidance for an official fixed release.; Restrict CMS administration to trusted networks and authenticated administrators..

Prepared

Jun 29, 2026, 07:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.