Coppermine Cross-site Scripting (XSS) Vulnerability - CVE-2018-14478 - Vulnerability Database

Coppermine Cross-site Scripting (XSS) Vulnerability - CVE-2018-14478

Medium

Reference: CVE-2018-14478

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2018-14478

Title: Coppermine Cross-site Scripting (XSS) Vulnerability

Overview:

ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name recipient_email greetings or recipient_name parameter.