Description
Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the data parameter.
References
- 27534 third-party-advisory
- coppermine-displayecard-xss(38290) vdb-entry
- 26357 vdb-entry
- 38420 vdb-entry
- http://coppermine-gallery.net/forum/index.php?topic=48106.0