CVE-2020-5593: Zenphoto

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

Zenphoto versions prior to 1.5.7 allows an attacker to conduct PHP code injection attacks by leading a user to upload a specially crafted .zip file.

Affected products

• Zenphoto Zenphoto: before 1.5.7 (fixed in 1.5.7)

Published 2020-06-11. Last modified 2026-06-17.