CVE-2012-2641

Zenphoto contains a cross-site scripting (XSS) vulnerability in versions 1.4.2.4 and earlier (Zenphoto before 1.4.3). The issue allows an attacker to trigger improper interaction with an unspecified library to execute arbitrary script in a victim’s browser. This is a client-side impact with poten...

CVE-2012-2641

Cross-site scripting XSS vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library...