CVE-2018-20140: Zenphoto

Medium severity, CVSS 6.1. EPSS: 1.6% chance of exploitation in the next 30 days.

Zenphoto 1.4.14 has multiple cross-site scripting (XSS) vulnerabilities via different URL parameters.

Affected products

• Zenphoto Zenphoto: version 1.4.14 only

Published 2019-03-21. Last modified 2026-06-17.