Описание
Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter.
Ссылки
- PatchVendor Advisory
- ExploitPatch
- PatchVendor Advisory
- ExploitPatch
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:ifoto:ifoto:0.20:*:*:*:*:*:*:*
EPSS
Процентиль: 77%
0.01047
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
github
больше 3 лет назад
Cross-site scripting (XSS) vulnerability in iFoto 0.20, and possibly other versions before 0.50, allows remote attackers to inject arbitrary HTML or web script via a base64-encoded file parameter.
EPSS
Процентиль: 77%
0.01047
Низкий
4.3 Medium
CVSS2
Дефекты
NVD-CWE-Other