CVE-2008-5795: Cross-site scripting (XSS) vulnerability in the eluna Page Comments (eluna_pagecomments) extension 1.1.2 an...

Security readout for executives and security teams

This is an old cross-site scripting issue in the eluna Page Comments extension for TYPO3. If a vulnerable version is installed, an attacker may be able to make pages run attacker-supplied script or HTML in a visitor’s browser. The source bundle does not provide severity, exploit status, or detailed fix information. Exposure is likely limited to legacy TYPO3 installations that still use eluna_pagecomments version 1.1.2 or earlier. The bundle’s affected-product metadata is incomplete, so asset owners should verify installed TYPO3 extensions directly rather than relying on CPE matching. Handle as a legacy exposure check, not a broad emergency. Escalate quickly if the vulnerable extension is present on public TYPO3 sites, especially where comments are enabled or untrusted users can submit content. Mitigation focus: Inventory TYPO3 sites for the eluna_pagecomments extension.; Check TYPO3 and extension vendor guidance for fixed versions or removal advice.; Update, disable, or remove vulnerable extension versions when confirmed..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.