CVE-2014-10035: Multiple cross-site scripting (XSS) vulnerabilities in the admin area in couponPHP before 1.2.0 allow remot...

Security readout for executives and security teams

CVE-2014-10035 is an admin-area cross-site scripting issue in couponPHP before 1.2.0. A logged-in remote administrator could inject script or HTML through several admin parameters. Business impact depends on whether couponPHP is still deployed and who has admin access. Exposure appears limited to organizations running couponPHP before 1.2.0, especially where the admin interface is reachable by multiple or less-trusted administrators. Internet exposure of the admin area would increase risk, but the source bundle does not confirm deployment prevalence. Treat this as a targeted cleanup item unless couponPHP admin access is internet-facing or shared with untrusted users. Prioritize confirmation of product presence first; urgency rises quickly if an old admin panel remains exposed. Mitigation focus: Identify any couponPHP deployments and confirm their versions.; Upgrade from couponPHP versions before 1.2.0 where applicable.; Restrict admin access to trusted networks and accounts..

Prepared

Jun 14, 2026, 05:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.