CVE-2005-4799: Multiple cross-site scripting (XSS) vulnerabilities in Yet Another PHP Image Gallery (YaPIG) 0.95b and earl...

Security readout for executives and security teams

This CVE describes cross-site scripting in the old YaPIG image gallery. An attacker could place malicious script or HTML through image-comment website fields or an image-size parameter, affecting users who view the content. Business risk is mainly account misuse, phishing, or content manipulation on sites still running YaPIG 0.95b or earlier. Exposure is likely limited to legacy websites still hosting Yet Another PHP Image Gallery 0.95b or earlier. Modern environments are unlikely affected unless old PHP gallery code remains deployed. Treat as a legacy internet-exposure cleanup item. It is not KEV-listed in the provided data, but any public YaPIG instance should be remediated because XSS can affect users and damage site trust. Mitigation focus: Inventory public sites for YaPIG 0.95b or earlier.; Check vendor or archive guidance for any official fixed release.; If unsupported, replace or remove the YaPIG deployment..

Prepared

Jun 29, 2026, 12:43 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.