Zenphoto
33 known vulnerabilities
Top Products
Zenphoto 1.6 contains a stored cross-site scripting vulnerability in the user postal code field accessible through the a
Zenphoto 1.6 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject maliciou
Stored cross-site scripting vulnerability in Zenphoto versions prior to 1.6 allows remote a remote authenticated attacke
Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attacke
Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a
Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary Ja
Zenphoto before 1.4.3.4 admin-news-articles.php date parameter XSS.
Cross-site request forgery (CSRF) vulnerability in admin.php in Zenphoto before 1.4.9 allows remote attackers to hijack
The sanitize_string function in Zenphoto before 1.4.9 does not properly sanitize HTML tags, which allows remote attacker
Incomplete blacklist in sanitize_string in Zenphoto before 1.4.9 allows remote attackers to conduct cross-site scripting
SQL injection vulnerability in Zenphoto before 1.4.9 allow remote administrators to execute arbitrary SQL commands.
Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters.
Local file inclusion vulnerability in Zenphoto 1.4.14 and earlier allows a remote attacker with an administrative privil
The sanitize_string function in ZenPhoto before 1.4.9 utilized the html_entity_decode function after input sanitation, w
Frequently Asked Questions
How many CVEs affect Zenphoto?
Zenphoto has 33 CVE records in our database, including 0 critical and 8 high severity vulnerabilities.
What are the most severe Zenphoto vulnerabilities?
Zenphoto has 0 critical severity (CVSS 9.0+) and 8 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Zenphoto vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Zenphoto products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Zenphoto Vulnerabilities
CyberStrike scans your infrastructure for Zenphoto vulnerabilities and provides real-time remediation guidance.
Get Started