What’s Vulnerable › Vulnerabilities

CVE-2015-9478

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-10-10 · updated 2026-06-17
• Weakness: CWE-79

Description

prettyPhoto before 3.1.6 has js/jquery.prettyPhoto.js XSS.

Affected products

• No-Margin-For-Error Prettyphoto: before 3.1.6 — fixed in 3.1.6

How to fix

Upgrade to a fixed version: No-Margin-For-Error Prettyphoto 3.1.6. Check the vendor advisory for mitigations.

References

• https://github.com/scaron/prettyphoto/issues/149
• https://github.com/scaron/prettyphoto/releases/tag/3.1.6
• https://github.com/scaron/prettyphoto/issues/149
• https://github.com/scaron/prettyphoto/releases/tag/3.1.6

Get alerted when CVE-2015-9478 or the next vulnerability affects your stack