CVE-2018-14478
NONE EPSS 58.2%
Published May 7, 20197y ago · Modified Jun 17, 20262w ago
Published May 7, 2019 7y ago
Last Modified Jun 17, 2026 2w ago
Description
ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter.
Threat Intelligence
EPSS Exploit Probability
58.2% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-79 Cross-site Scripting Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| coppermine-gallery | coppermine_photo_gallery | 1.5.46 | any |
References 2
- forum.coppermine-gallery.net http://forum.coppermine-gallery.net/index.php/board%2C58.0.html
- packetstormsecurity.com http://packetstormsecurity.com/files/151306/Coppermine-1.5.46-Cross-Site-Scripting.html
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.