Unscored CVE-2015-2948 EUVD-2015-3032GHSA-85g9-r32q-9h5f

Cross-site scripting (XSS) vulnerability in the image processor in Zenphoto before 1.4.8 allows remote attackers to inject arbitrary web sc…

Published May 31, 2015 · Updated Aug 6, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in the image processor in Zenphoto before 1.4.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

JVN#68452022 third-party-advisory
http://www.zenphoto.org/news/zenphoto-1.4.8
JVNDB-2015-000070 third-party-advisory
74895 vdb-entry