CVE-2015-2275

MEDIUM 4.3CVE-2015-2275 · Published 12/03/2015 · updated 17/06/2026

In short

CVE-2015-2275 is a MEDIUM (CVSS 4.3) vulnerability affecting community gallery (wotlab).
Chance of exploitation in the next 30 days (EPSS): 3.7%, higher than 89.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
community gallery wotlab	`= 2.0`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in WoltLab Community Gallery 2.0 before 2014-12-26 allows remote attackers to inject arbitrary web script or HTML via the parameters[data][7][title] parameter in a saveImageData action to index.php/AJAXProxy.

References

packetstormsecurity.com/files/130766/Community-Gallery-2.0-Cross-Site-Scripting.html · Exploit
seclists.org/fulldisclosure/2015/Mar/65 · Exploit
exploit-db.com/exploits/36368 · Exploit
itas.vn/news/itas-team-found-out-a-stored-xss-vulnerability-in-burning-board-community-gallery-77.html · Exploit
osvdb.org/119455
securityfocus.com/archive/1/534841/100/0/threaded
securityfocus.com/bid/73053

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free