ZenPhoto 1.4.0.3 Cross Site Scripting

ZenPhoto version 1.4.0.3 suffers from a x-forwarded-for HTTP header persistent cross site scripting vulnerability.

Source: ZenPhoto 1.4.0.3 Cross Site Scripting