TI-2013-05626 CVE-2013-6837 · GHSA-xc36-3p8q-x8x7Cross-site scripting (XSS) vulnerability in the setTimeout function in…Priority LOW 26Cross-site scripting (XSS) vulnerability in the setTimeout function in js/jquery.prettyPhoto.js in prettyPhoto 3.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted PATH_INTO to t…CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03111 · Published 2013-12-19 · No fix listed CWE-79