CVE-2015-2275 Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parameters[data][7][title] parameter....
MediumCVSS 4.3
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parameters[data][7][title] parameter in a saveImageData action to index.php/AJAXProxy.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wotlab community gallery | = 2.0 | No fix listed |
References
- packetstormsecurity.com exploit
- 20150311 Community Gallery - Srored Corss-Site Scripting vulnerability exploit mailing-list
- 36368 exploit
- www.itas.vn exploit
- 119455 vdb-entry
- 20150311 Community Gallery - Srored Corss-Site Scripting vulnerability mailing-list
- 73053 vdb-entry