Description
ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin YITH WooCommerce PDF Invoice and Shipping List Security Bypass (1.2.12)
WordPress Plugin Team Showcase Multiple Vulnerabilities (1.22.15)
Magento Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-8156)
WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.1.5.2)
WordPress Plugin Elementor Website Builder Cross-Site Scripting (2.7.5)