CVE-2009-4690: Multiple cross-site scripting (XSS) vulnerabilities in YourFreeWorld Programs Rating Script allow remote at...

Security readout for executives and security teams

This old CVE reports cross-site scripting in YourFreeWorld Programs Rating Script. An attacker could inject script or HTML through the id parameter on rating and comment pages. Business urgency depends on whether this legacy script is still publicly reachable. Exposure is likely limited to sites still running YourFreeWorld Programs Rating Script, especially public instances exposing rate.php or postcomments.php. Asset inventories may miss it because affected vendor and product metadata are listed as n/a. Prioritize confirmation over emergency response. If the script is not present, risk is negligible. If present on a public site, remove or isolate it because the issue is old, publicly documented, and lacks clear supported remediation details. Mitigation focus: Identify and retire any YourFreeWorld Programs Rating Script deployments.; Check original vendor or archive guidance for patched versions or removal advice.; Restrict public access to affected PHP endpoints if the script must remain online..

Prepared

Jun 28, 2026, 03:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.