CVE-2011-4709: Multiple cross-site scripting (XSS) vulnerabilities in Hotaru.php in the Search plugin 1.3 for Hotaru CMS a...

Security readout for executives and security teams

CVE-2011-4709 describes multiple cross-site scripting issues in Hotaru CMS Search plugin 1.3. An attacker could inject browser-executed script or HTML through named parameters. Business impact depends on whether the affected CMS/plugin is still deployed and whether users with privileges can be targeted. Exposure is likely limited to sites running Hotaru CMS with Search plugin 1.3 or closely related affected code. The source bundle does not identify supported vendor packages, CPEs, or deployment prevalence. Treat this as an exposure-confirmation item rather than an emergency unless the affected CMS is externally reachable. If present, prioritize removal or patching because XSS can support account compromise, defacement, or session abuse. Mitigation focus: Inventory any Hotaru CMS installations and confirm whether Search plugin 1.3 is present.; Check vendor or project guidance for an official patched version or removal recommendation.; Disable or remove the affected Search plugin if no maintained fix is available..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.