Description
The sanitize_string function in Zenphoto before 1.4.9 does not properly sanitize HTML tags, which allows remote attackers to perform a cross-site scripting (XSS) attack by wrapping a payload in "<<script></script>script>payload<script></script></script>", or in an image tag, with the payload as the onerror event.
Remediation
References
Related Vulnerabilities
Moodle Exposure of Resource to Wrong Sphere Vulnerability (CVE-2023-28336)
Jenkins Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-1806)
WordPress Plugin WP-Cal 'id' Parameter SQL Injection (0.3)
WordPress Plugin Recipe Card Blocks for Gutenberg & Elementor Cross-Site Scripting (2.8.2)