CVE-2016-10508

Multiple cross-site scripting XSS vulnerabilities in phpThumb before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php...

CVE-2016-10508

The CVE-2016-10508 entry concerns phpThumb, a PHP library for image thumbnail creation. Affected versions are before 1.7.14, where multiple cross-site scripting (XSS) vulnerabilities exist in phpThumb() enabling remote attackers to inject arbitrary web script or HTML through parameters in the dem...