Description

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.

Remediation

References

CVE-2020-5592

Related Vulnerabilities

MySQL Out-of-bounds Write Vulnerability (CVE-2020-15358)

WordPress Plugin WP Floating Menu-One page navigator, sticky menu for WordPress Cross-Site Scripting (1.3.0)

WordPress Plugin iThemes Security (formerly Better WP Security) Multiple Vulnerabilities (3.6.3)

WordPress Plugin WordPress Calls to Action Unspecified Vulnerability (2.3.1)

WordPress Plugin Redirection HTTP Referrer Header HTML Injection (2.2.9)

Severity

Medium

Classification

CVE-2020-5592 CWE-707 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities