A vulnerability was detected in coppermine-gallery Coppermine Photo Gallery up to 1.6.28. (CVE-2026-82483)
Description
A cross-site scripting (XSS) vulnerability exists in Coppermine Photo Gallery up to version 1.6.28 in the db_input.php file's Hidden Album Update Endpoint. This vulnerability can be exploited remotely and allows an attacker to inject malicious scripts. The issue is fixed in version 1.6.29. The vulnerability has a low severity rating with a CVSS score of 3.5.
CVSS v3.1
Score 3.5low
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-82483 is a cross-site scripting vulnerability in Coppermine Photo Gallery affecting versions up to 1.6.28. The flaw resides in an unknown function within the db_input.php file related to the Hidden Album Update Endpoint. Exploitation can be performed remotely and may lead to script injection attacks. The vulnerability is addressed by upgrading to version 1.6.29. The CVSS 3.1 base score is 3.5, indicating low severity, with attack vector network, low attack complexity, requiring low privileges and user interaction, impacting integrity but not confidentiality or availability.
Potential Impact
The vulnerability allows remote attackers to perform cross-site scripting attacks, potentially leading to limited integrity impact such as script injection. There is no impact on confidentiality or availability. The low CVSS score reflects the limited severity of this issue.
Mitigation Recommendations
Upgrade Coppermine Photo Gallery to version 1.6.29 or later to remediate this vulnerability. No other mitigation steps are indicated.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-2mv6-fvg7-6f57
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-82483"]
- Database Specific Severity
- LOW
- Cvss Version
- 3.1
Threat ID: 6a944bcdacd9273b49b1d142
Added to database: 08/30/2026, 15:27:09 UTC
Last enriched: 09/09/2026, 12:54:01 UTC
Last updated: 10/15/2026, 06:48:19 UTC
Views: 91
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.