Description
Cross-site scripting (XSS) vulnerability in Coppermine Photo Gallery (CPG) before 1.4.27 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References (4)
Core 4
Core References
Patch mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/06/08/2
Patch mailing-list
x_refsource_mlist
http://www.openwall.com/lists/oss-security/2011/06/08/6
Patch x_refsource_confirm
http://bugs.gentoo.org/show_bug.cgi?id=347287
Various Sources x_refsource_confirm
http://forum.coppermine-gallery.net/index.php/topic%2C65023.msg322935.html
Scores
EPSS
0.0105
EPSS Percentile
60.8%
Details
CWE
CWE-79
Status
published
Products (40)
coppermine-gallery/coppermine_photo_gallery
1.0 (2 CPE variants)
coppermine-gallery/coppermine_photo_gallery
1.1 (2 CPE variants)
coppermine-gallery/coppermine_photo_gallery
1.1.0
coppermine-gallery/coppermine_photo_gallery
1.2
coppermine-gallery/coppermine_photo_gallery
1.2.0 (2 CPE variants)
coppermine-gallery/coppermine_photo_gallery
1.2.1 (3 CPE variants)
coppermine-gallery/coppermine_photo_gallery
1.3.0
coppermine-gallery/coppermine_photo_gallery
1.3.1
coppermine-gallery/coppermine_photo_gallery
1.3.2
coppermine-gallery/coppermine_photo_gallery
1.3.3
... and 30 more
Published
Jun 14, 2011
Tracked Since
Feb 18, 2026