Cross-site scripting (XSS) vulnerability in portfolio.php in Verosky Media Instant Photo Gallery, possibly before 1.0.2, allows remote attackers to inject arbitrary web script or HTML via the cat_id parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Instant_photo_gallery | Verosky_media | 1.0 (including) | 1.0 (including) |