CVE-2009-4403: Rumbacms Rumba XML

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in index.php in Rumba XML 1.8 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO. NOTE: some of these details are obtained from third party information.

Affected products

• Rumbacms Rumba XML: version 1.8 only

Published 2009-12-23. Last modified 2026-06-16.