CVE-2009-1616

No fix known EPSS 2%

Cross-site scripting (XSS) vulnerability in docs/showdoc.php in Coppermine Photo Gallery (CPG) before 1.4.22 allows remote attackers to inject arbitrary web script or HTML via the css parameter, a different vector than CVE-2008-0505.

Published 2009-05-11 · CVE record · OSV

Products: coppermine_photo_gallery