Description

Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library.

Remediation

References

CVE-2012-2641

Related Vulnerabilities

Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-43941)

ProjectSend Improper Input Validation Vulnerability (CVE-2017-9741)

WordPress Plugin Email Artillery (MASS EMAIL) Multiple Vulnerabilities (4.1)

WordPress Plugin PDF & Print by BestWebSoft Cross-Site Scripting (2.0.2)

WordPress Plugin Cryptocurrency Widgets Pack SQL Injection (1.8.1)

Severity

Medium

Classification

CVE-2012-2641 CWE-707

Tags

Missing Update Known Vulnerabilities