medium4.3
CVE-2012-4342
Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vec…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Gallery 3 before 3.0.4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Menalto | Gallery | through 3.0.3 Versions 3.0, 3.0.1, 3.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://gallery.menalto.com/gallery_3_0_4
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html
- http://gallery.menalto.com/gallery_3_0_4
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082954.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-June/082995.html