CVE-2012-2641

Cross-site scripting (XSS) vulnerability in Zenphoto before 1.4.3 allows remote attackers to inject arbitrary web script or HTML by triggering improper interaction with an unspecified library.

Date published : 2012-07-05

http://www.zenphoto.org/news/zenphoto-1.4.3

http://jvn.jp/en/jp/JVN59842447/index.html