PT-2014-2102

Name of the Vulnerable Software and Affected Versions TimThumb versions prior to 1.15 r85 Description A cross-site scripting XSS issue exists due to a vulnerability in the displayError function in timthumb.php. This allows remote attackers to inject arbitrary web script or HTML via unspecified...