Vulnerabilities > Phpthumb Project

DATE CVE VULNERABILITY TITLE RISK
2017-08-31 CVE-2016-10508 Cross-site Scripting vulnerability in PHPthumb Project PHPthumb 1.7.11/1.7.12/1.7.13
Multiple cross-site scripting (XSS) vulnerabilities in phpThumb() before 1.7.14 allow remote attackers to inject arbitrary web script or HTML via parameters in demo/phpThumb.demo.showpic.php.
network
low complexity
phpthumb-project CWE-79
6.1