CVE-2009-0526: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AdaptCMS Lite 1.4 allow remote attacker...

Security readout for executives and security teams

CVE-2009-0526 describes cross-site scripting in AdaptCMS Lite 1.4. A remote attacker could make the site return attacker-controlled script or HTML through index.php inputs or the request URI. Business impact depends on whether this old CMS is still internet-facing and used for authenticated sessions or trusted content. Likely exposure is limited to organizations still running AdaptCMS Lite 1.4 or derivative code with the vulnerable index.php behavior. The source bundle’s structured affected field is incomplete, so confirm exposure by asset inventory and code/version review. Prioritize remediation if the CMS is still public-facing, handles login sessions, or is used by staff. If not present, document non-exposure. Because no current patch detail is provided, focus on confirming presence and retiring unsupported deployments. Mitigation focus: Identify and remove any public AdaptCMS Lite 1.4 deployments.; Check vendor or archived project guidance for fixed versions or retirement advice.; Replace unsupported legacy CMS instances with maintained software..

Prepared

Jun 28, 2026, 11:23 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.