CVE-2020-5592

Cross-site scripting vulnerability in Zenphoto versions prior to 1.5.7 allows remote attackers to inject an arbitrary JavaScript via unspecified vectors.

• CWE-79

• https://jvn.jp/en/jp/JVN32252648/index.htmlThird Party Advisory
• https://www.zenphoto.org/news/zenphoto-1.5.7/Release Notes, Vendor Advisory
• https://jvn.jp/en/jp/JVN32252648/index.htmlThird Party Advisory
• https://www.zenphoto.org/news/zenphoto-1.5.7/Release Notes, Vendor Advisory

Published

Jun 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-5586Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 t…4.8
• CVE-2020-5587Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated atta…6.5
• CVE-2020-5588Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1…4.9
• CVE-2020-5589SONY Wireless Headphones WF-1000X, WF-SP700N, WH-1000XM2, WH…8.8
• CVE-2020-5590Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18…8.1
• CVE-2020-5591XACK DNS 1.11.0 to 1.11.4, 1.10.0 to 1.10.8, 1.8.0 to 1.8.23…7.5
• CVE-2020-5593Zenphoto versions prior to 1.5.7 allows an attacker to condu…8.8
• CVE-2020-5594Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series C…9.8
• CVE-2020-5595TCP/IP function included in the firmware of Mitsubishi Elect…9.8
• CVE-2020-5596TCP/IP function included in the firmware of Mitsubishi Elect…7.5
• CVE-2020-5597TCP/IP function included in the firmware of Mitsubishi Elect…7.5
• CVE-2020-5598TCP/IP function included in the firmware of Mitsubishi Elect…7.5