Anixo

**Name of the Vulnerable Software and Affected Versions** Coppermine Photo Gallery versions prior to 1.6.29 **Description** A remote cross site scripting issue exists in the `edit profile` endpoint within the `profile.php` file. The flaw allows an attacker to execute malicious scripts by manipulating the `Biography` variable. Cross site scripting is a technique where malicious scripts are injected into trusted websites. **Recommendations** Update to version 1.6.29.

**Name of the Vulnerable Software and Affected Versions** Coppermine Photo Gallery versions prior to 1.6.29 **Description** A remote cross site scripting issue exists within the Hidden Album Update Endpoint in the `db input.php` file. Cross site scripting is a technique where malicious scripts are injected into trusted websites, which are then executed in the browser of the user. **Recommendations** Upgrade to version 1.6.29.