Coppermine · Coppermine Photo Gallery · CVE-2014-4612
**Name of the Vulnerable Software and Affected Versions**
Coppermine Photo Gallery versions prior to 1.5.27
Coppermine Photo Gallery versions 1.6.x prior to 1.6.01
**Description**
A cross-site scripting (XSS) issue exists in the keywords manager, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecified vectors in the keywordmgr.php file.
**Recommendations**
For versions prior to 1.5.27, update to version 1.5.27 or later.
For versions 1.6.x prior to 1.6.01, update to version 1.6.01 or later.