CVE-2013-7277: Multiple cross-site scripting (XSS) vulnerabilities in Andy's PHP Knowledgebase (Aphpkb) before 0.95.8 allo...

Security readout for executives and security teams

This CVE affects Andy's PHP Knowledgebase before 0.95.8. A remote attacker could make the application display attacker-controlled script or HTML through specific request fields. That can expose users to session theft, phishing, or content tampering if the application is reachable by staff or customers. Exposure is likely limited to organizations still running Andy's PHP Knowledgebase before version 0.95.8, especially internet-facing knowledgebase deployments. The source bundle does not identify affected CPEs or supported platform details. Prioritize remediation if Aphpkb is internet-facing or used by authenticated staff. Business urgency is moderate because XSS can compromise user trust and sessions, but the bundle provides no active exploitation or severity score. Mitigation focus: Inventory Aphpkb deployments and identify versions older than 0.95.8.; Upgrade affected installations to Aphpkb 0.95.8 or later where applicable.; Consult project or vendor guidance if direct upgrade is not immediately possible..

Prepared

Jun 14, 2026, 14:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.