Description
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.
Remediation
References
Related Vulnerabilities
OpenSSL Resource Management Errors Vulnerability (CVE-2012-0050)
Django URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-7233)
Internet Information Services Other Vulnerability (CVE-2002-0073)
WordPress Plugin Sooqr Search Restricted File Upload (1.1.4)
WordPress Plugin User Access Manager Unspecified Vulnerability (1.2.6.9)