CVE-2009-1654: Cross-site scripting (XSS) vulnerability in questiondetail.php in Easy Scripts Answer and Question Script a...

Security readout for executives and security teams

This CVE describes a cross-site scripting issue in Easy Scripts Answer and Question Script. A public site running the affected question detail page could let an attacker inject script through a question ID value. The record does not provide severity, affected versions, or a confirmed vendor fix. Exposure is most likely on internet-facing installations of Easy Scripts Answer and Question Script that still serve questiondetail.php. The sources do not identify affected versions, so inventory and code confirmation are required. Treat this as moderate priority for legacy public web assets. The issue is old, publicly documented, and may affect unsupported software, but the provided evidence does not show active exploitation or business-critical severity. Mitigation focus: Check vendor or maintainer guidance for any available fixed release.; Retire or isolate the application if it is unsupported.; Ensure questionid is validated and safely output-encoded..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.