AI Score
Confidence
High
EPSS
Percentile
57.2%
Cross-site scripting (XSS) vulnerability in settings.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the sample parameter.
packetstormsecurity.org/0911-exploits/tftgallery-traversal.txt
secunia.com/advisories/37156
www.securityfocus.com/bid/36898
exchange.xforce.ibmcloud.com/vulnerabilities/54087