CVE-2008-3088: Cross-site scripting (XSS) vulnerability in the Files module in Kasseler CMS 1.3.0 and 1.3.1 Lite allows re...

Security readout for executives and security teams

CVE-2008-3088 is a cross-site scripting issue in the Files module of Kasseler CMS 1.3.0 and 1.3.1 Lite. A remote attacker could inject script or HTML through the cid parameter in a Category request to index.php. This is mainly a risk for organizations still running this obsolete CMS publicly. Exposure is likely limited to legacy Kasseler CMS 1.3.0 or 1.3.1 Lite installations with the Files module reachable by users or the internet. Modern systems are unaffected unless this specific CMS remains deployed. Treat this as a legacy exposure cleanup item. It is not KEV-listed and has no known active exploitation in the provided sources, but public exploit availability makes internet-facing obsolete deployments worth verifying and retiring promptly. Mitigation focus: Inventory for Kasseler CMS 1.3.0 and 1.3.1 Lite deployments.; Check vendor or trusted archival guidance for fixed versions or upgrade paths.; Retire or replace unsupported Kasseler CMS installations where feasible..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.