TI-2006-02924 CVE-2006-3020 · GHSA-fvf5-vv8f-qp37Multiple cross-site scripting (XSS) vulnerabilities in FullPhoto.asp in WS-Album 1.1 and…Priority LOW 34Multiple cross-site scripting (XSS) vulnerabilities in FullPhoto.asp in WS-Album 1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) image and (2) PublisedDate parameters.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02221 · Published 2006-06-15 · No fix listed