Zenphoto vulnerabilities
7 published CVEs name Zenphoto among the affected products.
- Published CVEs
- 7
- Last 12 months
- 2
- Critical
- 0
- Known exploited
- 0
Critical 0High 2Medium 5Low 0Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20203
- 20221
- 20252
Newest CVEs
- CVE-2023-53916
Zenphoto 1.6 Stored Cross-Site Scripting via User Postal Code Field
Zenphoto · Zenphoto
Medium5.1 - CVE-2023-53915
Zenphoto 1.6 Stored Cross-Site Scripting via Album Description
Zenphoto · Zenphoto
Medium5.1 - CVE-2022-44449
Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacker with an administrative privilege to…
Zenphoto · Zenphoto
Medium6.1 - CVE-2020-5593
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file.
Zenphoto · Zenphoto
High8.8 - CVE-2020-5592
Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.
Zenphoto · Zenphoto
Medium6.1 - CVE-2012-4519
Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.
Zenphoto · Zenphoto
Medium6.1 - CVE-2018-0610
Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privilege to execute arbitrary code or obtain…
Zenphoto · Zenphoto
High7.2