CVE-2013-4759: Multiple cross-site scripting (XSS) vulnerabilities in the Magnolia Form module 1.x before 1.4.7 and 2.x be...

Security readout for executives and security teams

This CVE is a cross-site scripting issue in Magnolia CMS Form module registration handling. If an affected public registration page is exposed, an attacker could submit crafted profile fields that cause script or HTML to run in a user’s browser. The sources do not report active exploitation. Exposure is most likely on Magnolia CMS deployments using the affected Form module versions and exposing the demo-project members-area registration route. Systems without that route, or upgraded to fixed module versions, are less likely to be affected. Treat this as a moderate web application risk. Prioritize internet-facing Magnolia sites with public registration enabled, especially legacy systems, but there is no source-backed evidence of active exploitation or critical impact. Mitigation focus: Upgrade Magnolia Form module to 1.4.7 or later for 1.x deployments.; Upgrade Magnolia Form module to 2.0.2 or later for 2.x deployments.; Remove or restrict the demo-project registration page if it is not required..

Prepared

Jun 14, 2026, 21:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.