Description

Cross-site scripting (XSS) vulnerability in zp-core/admin.php in Zenphoto 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the from parameter.

Remediation

References

CVE-2009-4562

Related Vulnerabilities

WordPress Plugin Formidable Forms-Contact Form, Survey, Quiz, Calculator & Custom Form Builder Cross-Site Request Forgery (4.02.03)

WordPress Plugin Absolute Privacy 'abpr_authenticateUser()' Security Bypass (2.0.5)

Microsoft SQL Server CVE-2023-23384 Vulnerability (CVE-2023-23384)

MediaWiki Insertion of Sensitive Information into Log File Vulnerability (CVE-2024-40598)

MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2022-34750)

Severity

Medium

Classification

CVE-2009-4562 CWE-707

Tags

Missing Update Known Vulnerabilities