CVE-2008-2035: Cross-site scripting (XSS) vulnerability in the Bluemoon, Inc.

Security readout for executives and security teams

This CVE describes cross-site scripting in older Bluemoon modules used with XOOPS, XOOPS Cube, and ImpressCMS. A remote attacker could inject script or HTML through unspecified inputs. The sources do not provide CVSS, exploit evidence, or a confirmed patch path, so urgency depends on whether these legacy modules are still deployed. Exposure is most likely in legacy XOOPS, XOOPS Cube, or ImpressCMS sites that still run the listed Bluemoon modules. Modern systems without these modules are not indicated as affected by the provided sources. Treat this as a legacy web exposure review. It is not proven actively exploited in the provided sources, but public-facing CMS modules with XSS can create account, content, and visitor-trust risk. Mitigation focus: Inventory sites for the named Bluemoon modules and versions.; Check Bluemoon, JVN, Secunia, and platform guidance for updates or replacements.; Disable or remove affected legacy modules if no supported fix exists..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.