CVE-2005-2734

Fixed in a distro release EPSS 2%

Cross-site scripting (XSS) vulnerability in Gallery 1.5.1-RC2 and earlier allows remote attackers to inject arbitrary web script or HTML via EXIF data, such as the Camera Model Tag.

Published 2005-08-29 · CVE record · OSV

Products: gallery_project gallery

Distro releases