CVE-2009-3833
Tftgallery - XSS
Title source: ruleDescription
Cross-site scripting (XSS) vulnerability in index.php in TFTgallery 0.13 allows remote attackers to inject arbitrary web script or HTML via the album parameter.
Exploits (1)
Scores
EPSS
0.0023
EPSS Percentile
45.1%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
tftgallery/tftgallery
n/a/n/a
Timeline
Published
Nov 02, 2009
Tracked Since
Feb 18, 2026