4homepages: >> 4images >> 1.7.7 Security Vulnerabilities
Cross-site scripting (XSS) vulnerability in 4images 1.7.11 and earlier allows remote attackers to inject arbitrary web script or HTML via the cat_description parameter in an updatecat action to admin/categories.php.
CVSS Score
4.3
EPSS Score
0.002
Published
2015-10-05
Cross-site scripting (XSS) vulnerability in includes/functions.php in 4images 1.7 through 1.7.7 allows remote attackers to inject arbitrary web script or HTML via vectors related to the url variable.
CVSS Score
4.3
EPSS Score
0.003
Published
2009-07-08
Cross-site scripting (XSS) vulnerability in 4images 1.7.7 and earlier allows remote authenticated users to inject arbitrary web script or HTML by providing a crafted user_homepage parameter to member.php, and then posting a comment associated with a picture.
CVSS Score
3.5
EPSS Score
0.01
Published
2009-06-19