Coppermine Photo Gallery version 1.4.21 suffers from a cross site scripting vulnerability in showdoc.php.