Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
zenphoto 跨站脚本漏洞
Vulnerability Description
Zenphoto是Zenphoto团队开发的一套免费的图片库内容管理系统。该系统可管理图片,且支持音频、视频等多媒体。 Zenphoto中存在跨站脚本漏洞,该漏洞源于某些未明输入在返回给用户之前未经正确验证。攻击者可利用该漏洞在受影响站点上下文中用户浏览器会话中执行任意HTML和脚本代码。zenphoto 1.4.3之前版本存在漏洞,早期版本也可能受到影响。
CVSS Information
N/A
Vulnerability Type
N/A