ZZenphoto

Products

Exploited and recent CVEs

• CVE-2023-53916 Medium 4.6 Zenphoto 1.6 Stored Cross-Site Scripting via User Postal Code Field 0.3%
• CVE-2023-53915 Medium 4.6 Zenphoto 1.6 Stored Cross-Site Scripting via Album Description 0.3%
• CVE-2022-44449 Medium 6.1 Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administrative privilege to inject an arbitrary script. 0.8%
• CVE-2020-5593 Unrated Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file. 1.2%
• CVE-2020-5592 Unrated Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors. 0.8%