Skip to content
OpenAdvisories

Vendor

Zenphoto

7 known vulnerabilities.

Products

Zenphoto 7
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.6
    CVE-2023-53915

    Zenphoto 1.6 Stored Cross-Site Scripting via Album Description

    Zenphoto 1.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by inserting HTML content into album descriptions. Attackers can create albums with malicious iframe or script tags in the descri…

    Zenphoto Zenphoto
  • Medium 4.6
    CVE-2023-53916

    Zenphoto 1.6 Stored Cross-Site Scripting via User Postal Code Field

    Zenphoto 1.6 contains a stored cross-site scripting vulnerability in the user postal code field accessible through the admin-users.php interface. When administrators view user information imported as HTML, malicious JavaScript payloads injected into the posta…

    Zenphoto Zenphoto
  • Medium 6.1
    CVE-2022-44449

    Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attack…

    Zenphoto Zenphoto