CVE-2007-5013: Multiple cross-site scripting (XSS) vulnerabilities in index.php in Phormer 3.31 allow remote attackers to...

Security readout for executives and security teams

This is an old reported XSS issue in Phormer 3.31. Affected pages may let an attacker inject script or HTML into a user's browser through index.php parameters. The source bundle does not provide a vendor patch, severity score, or confirmed exploitation evidence. Exposure is likely limited to legacy Phormer 3.31 deployments or derived code still publicly reachable. The affected product data is incomplete in the CVE record, so confirm by inventory rather than CPE matching alone. Treat this as a legacy exposure check, not an emergency from the provided evidence. Prioritize quickly if Phormer 3.31 is internet-facing, unsupported, or used by authenticated administrators. Mitigation focus: Inventory for Phormer 3.31 or forks exposing index.php.; Check vendor or maintained fork guidance for fixed versions or replacement paths.; Restrict public access or retire the application if unsupported..

Prepared

Jun 29, 2026, 03:11 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.