Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505.
CPE | Name | Operator | Version |
---|---|---|---|
coppermine_photo_gallery | eq | 1.4.22 |