Vulnerability in Gallery Project
CVE-2005-4022
Cross-site scripting (XSS) vulnerability in the "Add Image From Web" feature in Gallery 2.0 before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag.
EPSS: 0.012 (65.2th percentile) — read the EPSS interpretation.
Affected products
- Gallery_project Gallery — versions 2.0, 2.0.1, 2.0_alpha1
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_OSVDB, Patch, vdb-entry, Vendor Advisory)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)