CVE-2018-14478: Coppermine-Gallery Coppermine Photo Gallery

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

ecard.php in Coppermine Photo Gallery (CPG) 1.5.46 has XSS via the sender_name, recipient_email, greetings, or recipient_name parameter.

Affected products

• Coppermine-Gallery Coppermine Photo Gallery: version 1.5.46 only

Published 2019-05-07. Last modified 2026-06-17.