Cross-site scripting (XSS) vulnerability in SelectaPix 1.31 allows remote attackers to inject arbitrary web script or HTML via the albumID parameter to (1) popup.php and (2) view_album.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Selectapix | Out_of_the_trees_web_design | 1.31 (including) | 1.31 (including) |