CVE-2012-2641

2022-10-0316:15:36

jpcert

www.cve.org

cve-2012-2641

zenphoto

cross-site scripting

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.7%

JSON

Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library.

References

jvn.jp/en/jp/JVN59842447/index.html

jvndb.jvn.jp/jvndb/JVNDB-2012-000065

www.zenphoto.org/news/zenphoto-1.4.3