CVE-2012-1789: Multiple cross-site scripting (XSS) vulnerabilities in Kongreg8 1.7.3 allow remote attackers to inject arbi...

Security readout for executives and security teams

CVE-2012-1789 is an old cross-site scripting issue in Kongreg8 1.7.3. An attacker could inject script or HTML through member and group form fields, potentially affecting users who view the stored content. The supplied sources do not provide a CVSS score, patch status, or evidence of active exploitation. Exposure is limited to organizations that still run Kongreg8 1.7.3 or legacy instances containing these modules. Internet-facing deployments or deployments used by privileged administrators would carry higher practical risk. Prioritize discovery first. This is a legacy application issue with incomplete severity data, but any exposed instance could create session, trust, or administrative workflow risk through XSS. Mitigation focus: Inventory for any Kongreg8 1.7.3 deployments or archived reachable instances.; Check vendor or maintainer guidance for fixed versions or official remediation.; Restrict access to affected member and group management pages..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.