CVE-2007-5817: Contentcustomizer

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del, (2) delbackup, (3) res, or (4) ren action. NOTE: this issue can be leveraged to conduct cross-site scripting (XSS) and possibly other attacks.

Affected products

• Contentcustomizer Contentcustomizer: up to and including 3.1mp

Published 2007-11-05. Last modified 2026-06-16.