CVE-2008-6127: Multiple cross-site scripting (XSS) vulnerabilities in moziloCMS 1.10.2 and earlier allow remote attackers...

Security readout for executives and security teams

moziloCMS 1.10.2 and earlier allowed attackers to place malicious script or HTML into several web request parameters. If a vulnerable site rendered that input to users, visitors or administrators could be exposed to browser-side attacks such as session theft, deceptive content, or unwanted actions. Exposure is likely limited to internet-facing or internally reachable moziloCMS deployments running version 1.10.2 or earlier. Risk is higher where authenticated administrators use the same browser session to manage content on the affected site. Treat this as a moderate legacy web application risk. It is not supported by evidence of active exploitation in the bundle, but exposed outdated CMS instances should be found and remediated because XSS can affect users and administrators. Mitigation focus: Inventory any moziloCMS deployments and confirm exact versions.; Check moziloCMS vendor changelog or advisory guidance for fixed releases.; Upgrade, retire, or isolate deployments running 1.10.2 or earlier..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.