Cross site scripting

2020-06-1108:15:00

PRIOn knowledge base

www.prio-n.com

6.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.2%

JSON

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.

CPENameOperatorVersion
zenphotolt1.5.7

CPE	Name	Operator	Version
	zenphoto	lt	1.5.7

References

jvn.jp/en/jp/JVN32252648/index.html

www.zenphoto.org/news/zenphoto-1.5.7/