CVE-2015-3921
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36...
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.
Exploit likelihood
What each source reports
NVD Score used
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.
- Record
CVE-2015-3921- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:P/A:N - Weakness
- CWE-79
- Updated
- 2026-11-02
CVE List No score
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.
- Record
CVE-2015-3921- Updated
- 2026-11-02
EUVDEUVD-2015-3953 No score
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.
- Record
EUVD-2015-3953- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-77j3-h7w3-qqv7 No score
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36...
Cross-site scripting (XSS) vulnerability in contact.php in Coppermine Photo Gallery before 1.5.36 allows remote authenticated users to inject arbitrary web script or HTML via the referer parameter.
- Record
GHSA-77j3-h7w3-qqv7- Weakness
- CWE-79
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-3921 is a low vulnerability (CVSS 3.5) in Coppermine-gallery Coppermine Photo Gallery, published May 27, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.53%, the 74th percentile. No source names a fixed version.
References
packetstormsecurity.com/files/132004/Coppermine-Gallery-1.5.34-XSS-Open-Redirection.html
securitytracker.com/id/1032558
securityfocus.com/bid/74872
forum.coppermine-gallery.net/index.php/topic%2C78194.0.html
nvd.nist.gov/vuln/detail/CVE-2015-3921
github.com/advisories/GHSA-77j3-h7w3-qqv7