CVE-2015-9478: no-margin-for-error prettyphoto – CVSS 6.1 · Watchpost

← All vulnerabilities

CVE-2015-9478

中危 6.1CVE-2015-9478 · Published 10/10/2019 · updated 17/06/2026

要点

CVE-2015-9478 是影响 prettyphoto (no-margin-for-error) 的中危 (CVSS 6.1)漏洞。
未来 30 天内被利用的概率（EPSS）：0.82%，高于 57.5% 的漏洞。
修复：升级到 3.1.6 或更高版本。

Package	Affected versions	Patched versions
prettyphoto no-margin-for-error	`< 3.1.6`	`3.1.6`

Description

prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS.

References

scaron/prettyphoto · Issue Tracking
scaron/prettyphoto release 3.1.6 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free