CyberRota Analysis
AI-GeneratedThe Coppermine Photo Gallery up to version 1.6.28 is vulnerable to cross-site scripting (XSS) through the edit_profile endpoint, specifically via the Biography argument in profile.php. This vulnerability can be exploited remotely, potentially allowing attackers to execute malicious scripts in the context of a user's session. Users and administrators of affected installations should prioritize upgrading to version 1.6.29 to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security vulnerability has been detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. This affects an unknown function of the file profile.php of the component edit_profile Endpoint. The manipulation of the argument Biography leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 1.6.29 mitigates this issue. Upgrading the affected component is recommended.