CVE-2013-3535: Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to i...

Security readout for executives and security teams

CMSLogik 1.2.0 and 1.2.1 have multiple cross-site scripting issues in administrative settings fields. An attacker could inject script or HTML that runs in a victim’s browser. The source notes this may be related to CSRF, so user interaction or an authenticated admin context may matter. Exposure is limited to environments still running CMSLogik 1.2.0 or 1.2.1, especially if administrative routes are reachable. The bundle does not provide CPEs or deployment prevalence, so asset confirmation is required. Prioritize if CMSLogik is internet-facing or still used for business content management. The product and versions are old, public exploit references exist, and a maintained upgrade path is unclear from the supplied sources. Mitigation focus: Identify any CMSLogik 1.2.0 or 1.2.1 installations.; Check CMSLogik or maintainer guidance for fixed versions or retirement advice.; Restrict access to administrative routes during assessment..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.