CVE-2009-2133: Multiple cross-site scripting (XSS) vulnerabilities in Pivot 1.40.4 and 1.40.7 allow remote attackers to in...

Security readout for executives and security teams

CVE-2009-2133 is a set of cross-site scripting issues in Pivot 1.40.4 and 1.40.7. An attacker could cause malicious script or HTML to be handled by vulnerable Pivot pages. Business urgency depends on whether any old Pivot instance is still exposed. Exposure is likely limited to organizations still running Pivot 1.40.4 or 1.40.7, especially where pivot/index.php or pivot/user.php is reachable. The supplied sources do not establish authentication requirements for every vector. Prioritize remediation if Pivot is internet-facing or used by privileged users. If no Pivot 1.40.4 or 1.40.7 exists, business urgency is low. Lack of KEV evidence lowers emergency pressure. Mitigation focus: Inventory for Pivot 1.40.4 and 1.40.7 installations.; Check Pivot/vendor guidance or migrate off unsupported legacy versions.; Restrict access to Pivot administrative and user endpoints..

Prepared

Jun 28, 2026, 10:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.