Cross-Site Scripting Flaw in Zenphoto by Zenphoto Team
CVE-2020-5592

6.1MEDIUM

Key Information:

Vendor

Zenphoto

Status
Zenphoto
Vendor
CVE Published:
11 June 2020

What is CVE-2020-5592?

A cross-site scripting vulnerability exists in Zenphoto versions prior to 1.5.7, which could enable remote attackers to inject arbitrary JavaScript through unspecified vectors. This type of vulnerability poses significant security risks, as it may allow attackers to execute malicious scripts in the user’s browser, potentially leading to data theft or other malicious actions.

Affected Version(s)

Zenphoto versions prior to 1.5.7

References

https://www.zenphoto.org/news/zenphoto-1.5.7/
x_refsource_MISC
https://jvn.jp/en/jp/JVN32252648/index.html
x_refsource_MISC

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.