Description

Cross-site scripting (XSS) vulnerability in the image processor in Zenphoto before 1.4.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2015-2948

Related Vulnerabilities

MySQL CVE-2017-10313 Vulnerability (CVE-2017-10313)

Internet Information Services Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2009-3023)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Security Bypass (3.11.8)

Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-38887)

WordPress Plugin Falang multilanguage for WordPress Cross-Site Scripting (1.3.17)

Severity

Medium

Classification

CVE-2015-2948 CWE-707

Tags

Missing Update Known Vulnerabilities