medium4.3
CVE-2012-2641
Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interac…
Impact
Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zenphoto | Zenphoto | through 1.4.2 Versions 0.9, 1.0, 1.0.1, 1.0.4, 1.0.5 |