TI-2012-02279 CVE-2012-2638 · GHSA-p2fv-ggj8-fxq6Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows…Priority LOW 22Cross-site scripting (XSS) vulnerability in SmallPICT.cgi in SmallPICT before 2.7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01135 · Published 2012-06-19 · No fix listed CWE-79