CVE-2008-3668: Multiple cross-site scripting (XSS) vulnerabilities in the Yogurt Social Network module 3.2 rc1 for XOOPS a...

Security readout for executives and security teams

CVE-2008-3668 is a set of cross-site scripting issues in Yogurt Social Network module 3.2 rc1 for XOOPS. An attacker could inject script or HTML through specific page parameters or a scrapbook description. Business risk depends on whether this old module is still deployed and reachable. Exposure is likely limited to XOOPS installations using Yogurt Social Network module 3.2 rc1. The source bundle does not identify affected CPEs, other versions, hosted services, or downstream packages, so asset confirmation is required. Treat as a targeted legacy exposure issue, not a broad emergency. Prioritize confirming whether the module exists in production. If found on an internet-facing site, remediate or disable it promptly because XSS can affect users and administrators. Mitigation focus: Check XOOPS and Yogurt module guidance for a fixed release or advisory.; Remove or disable Yogurt Social Network if it is unused.; Restrict access to affected pages until remediation is confirmed..

Prepared

Jun 28, 2026, 18:33 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.