CVE-2020-35853
MEDIUM4homepages 4images - XSS
Title source: ruleDescription
4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL. This vulnerability can result in an attacker to inject the XSS payload into the IMAGE URL. Each time a user visits that URL, the XSS triggers and the attacker can be able to steal the cookie according to the crafted payload.
Exploits (1)
Scores
CVSS v3
4.8
EPSS
0.0021
EPSS Percentile
42.9%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Details
CWE
CWE-79
Status
published
Products (1)
4homepages/4images
1.7.11
Published
Jan 26, 2021
Tracked Since
Feb 18, 2026