Description

Cross-site scripting (XSS) vulnerability in the export function in zp-core/zp-extensions/mergedRSS.php in Zenphoto before 1.4.5.4 allows remote attackers to inject arbitrary web script or HTML via the URI.

Remediation

References

CVE-2013-7241

Related Vulnerabilities

WordPress Plugin Export Users to CSV CSV Injection (1.4.2)

osCommerce Other Vulnerability (CVE-2005-1951)

WordPress Plugin Disqus Comment System Cross-Site Scripting (2.68)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.25)

WordPress Plugin WordPress Calls to Action Unspecified Vulnerability (2.3.5)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2013-7241