CVE-2018-20140
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2018-20140
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2018-20140.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2018-20140
- Published
- 2019-03-21T16:00:34.107Z
- Modified
- 2025-11-14T08:30:13.666489Z
- Severity
-
- 6.1 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters.
- References
-
- http://packetstormsecurity.com/files/151052/ZenPhoto-1.4.14-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2019/Jan/22
- https://github.com/zenphoto/zenphoto/commit/695fb61707e4286b64f6e446c189b449bd07d00a
- https://github.com/zenphoto/zenphoto/commit/9db85fcf9cc97887b81f34f03dcb180fd74e57da
- https://www.netsparker.com/web-applications-advisories/ns-18-043-cross-site-scripting-in-zenphoto/
Affected packages
Git / github.com/zenphoto/zenphoto
Affected ranges
- Type
- GIT
- Repo
- https://github.com/zenphoto/zenphoto
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedFixed
Affected versions
Zenphoto-1.*
Zenphoto-1.4.4
v1.*
v1.4.4Beta
v1.4.4preBeta
v1.5
zenphoto-1.*
zenphoto-1.4.10
zenphoto-1.4.11
zenphoto-1.4.12
zenphoto-1.4.13
zenphoto-1.4.14
zenphoto-1.4.4.1
zenphoto-1.4.4.1a
zenphoto-1.4.4.1b
zenphoto-1.4.4.2
zenphoto-1.4.4.3
zenphoto-1.4.4.4
zenphoto-1.4.4.5
zenphoto-1.4.4.6
zenphoto-1.4.4.7
zenphoto-1.4.4.8
zenphoto-1.4.4.9
zenphoto-1.4.5
zenphoto-1.4.5.1
zenphoto-1.4.5.10
zenphoto-1.4.5.2
zenphoto-1.4.5.3
zenphoto-1.4.5.4
zenphoto-1.4.5.6
zenphoto-1.4.5.7
zenphoto-1.4.5.8
zenphoto-1.4.5.9
zenphoto-1.4.6
zenphoto-1.4.6-RC1
zenphoto-1.4.6-RC2
zenphoto-1.4.7
zenphoto-1.4.8
zenphoto-1.4.9