← Database

CVE-2022-44449

MEDIUM CVSS: 4.8 Published: 2022-12-21 Modified: 2026-06-17

Description

Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administrative privilege to inject an arbitrary script.

Affected Platforms

Zenphoto Zenphoto

Weakness Type

CWE-79, CWE-79

References