description: Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.
problem types: Cross-site scripting
affected:
{
product: Zenphoto
vendor: Zenphoto
versions:
status: affected, version: versions prior to 1.5.7
}