Unscored CVE-2012-2641 EUVD-2012-2627GHSA-26wf-xmmh-wwqr

Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by trigger…

Published Jul 5, 2012 · Updated Sep 16, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library.

References

http://www.zenphoto.org/news/zenphoto-1.4.3
JVNDB-2012-000065 third-party-advisory
JVN#59842447 third-party-advisory