CVE-2010-1724: Multiple cross-site scripting (XSS) vulnerabilities in Zikula Application Framework 1.2.2, and possibly ear...

Security readout for executives and security teams

CVE-2010-1724 is an old cross-site scripting issue in Zikula Application Framework 1.2.2, and possibly earlier. A remote attacker could inject script or HTML through specific index.php parameters. Business impact depends on whether any public legacy Zikula site remains in use. Likely exposure is legacy Zikula Application Framework 1.2.2 or earlier, especially internet-facing sites still serving index.php. Modern exposure is probably limited unless old Zikula deployments remain online or embedded in forgotten web properties. Treat this as a legacy web application cleanup item unless exposed Zikula 1.2.2 or earlier is found. If internet-facing, prioritize remediation because XSS can undermine user trust and session integrity even without confirmed active exploitation. Mitigation focus: Inventory public sites for Zikula Application Framework 1.2.2 or earlier.; Check Zikula vendor guidance and the referenced 1.2.3 release notes.; Prioritize upgrade or retirement of unsupported legacy Zikula deployments..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.