CVE-2009-4320: Lythgoes The Next Generation Of Genealogy Sitebuilding

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in searchform.php in The Next Generation of Genealogy Sitebuilding (TNG) 7.1.2 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Affected products

• Lythgoes The Next Generation Of Genealogy Sitebuilding: version 7.1.2 only

Published 2009-12-14. Last modified 2026-06-16.