medium6.1
CVE-2020-5592
Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.
Impact
Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zenphoto | Zenphoto | before 1.5.7 |