CVE-2011-1063

MEDIUM 4.3CVE-2011-1063 · Published 23/02/2011 · updated 16/06/2026

In short

CVE-2011-1063 is a MEDIUM (CVSS 4.3) vulnerability affecting photopad (cherry-software).
Chance of exploitation in the next 30 days (EPSS): 1.1%, higher than 66.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
photopad cherry-software	`= 1.2.0`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in Cherry-Design Photopad 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) data[title] parameters in an edit action to files.php, or (3) id parameter in a view action to gallery.php.

References

secunia.com/advisories/43348 · Vendor Advisory
securityreason.com/securityalert/8103
htbridge.ch/advisory/multiple_xss_vulnerabilities_in_photopad.html · Exploit
securityfocus.com/archive/1/516448/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/65519

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free