Security Advisory
CVE-2015-5593
6.1
MEDIUM
Vulnerability Description
The sanitize_string function in Zenphoto before 1.4.9 does not properly sanitize HTML tags, which allows remote attackers to perform a cross-site scripting (XSS) attack by wrapping a payload in "<script>payload", or in an image tag, with the payload as the onerror event.
Published Date
December 31, 2019
Official Source
NIST NVD Advisory