CVE-2009-4864: Multiple cross-site scripting (XSS) vulnerabilities in escorts_search.php in I-Escorts Directory Script and...

Security readout for executives and security teams

This is an old cross-site scripting issue in a specific PHP search page used by I-Escorts Directory Script and Agency Script. If the vulnerable page is still public, an attacker could cause a visitor’s browser to run attacker-supplied script in the site context. Exposure is likely limited to legacy deployments that still run escorts_search.php from I-Escorts Directory Script or Agency Script. Organizations not using those scripts are not indicated as affected by the provided sources. Prioritize based on confirmed presence. If the affected legacy PHP script is internet-facing, remediate or remove it promptly because XSS can support session theft, phishing, and site trust abuse. Mitigation focus: Check whether the named scripts are present in public web roots.; Review vendor or maintainer guidance for fixed versions or replacement advice.; Restrict public access to escorts_search.php if business use is not required..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.