CVE-2020-35853
4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL. This vulnerability can result in an attacke...
Original description
The description as published by the source.
4images Image Gallery Management System 1.7.11 is affected by cross-site scripting (XSS) in the Image URL. This vulnerability can result in an attacker to inject the XSS payload into the IMAGE URL. Each time a user visits that URL, the XSS triggers and the attacker can be able to steal the cookie according to the crafted payload.
Affected packages
Bitnami
rum
[{"type":"SEMVER","events":[{"introduced":"1.7.11"},{"fixed":"1.7.12"}]}]
References
- advisory exploit-db.com
- web nvd.nist.gov