Unscored CVE-2020-5592 EUVD-2020-26753GHSA-r3w7-v7qj-3223

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspec…

Published Jun 11, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Description

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.

Affected products

Vendor	Product	Affected	Fixed
Zenphoto	Zenphoto	versions prior to 1.5.7	—

References

https://www.zenphoto.org/news/zenphoto-1.5.7/
https://jvn.jp/en/jp/JVN32252648/index.html