CVE-2007-1101: Photostand

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) message ("comment") or (2) name field, or the (3) q parameter in a search action in index.php.

Affected products

• Photostand Photostand: version 1.2.0 only

Published 2007-02-26. Last modified 2026-06-16.