CVE-2026-78187

🗓️ 24 Aug 2026 05:16:55Reported by [email protected]Type

A vulnerability has been found in Piwigo 16.3.0. This impacts an unknown function of the component Public Authentication Page. Such manipulation of the argument lang leads to cross site scripting. The attack may be performed from remote. A high co...

Reporter	Title	Published	Views	Family All 4
CVE	CVE-2026-78187	24 Aug 202600:00	–	cve
Cvelist	CVE-2026-78187 Piwigo Public Authentication cross site scripting	24 Aug 202604:30	–	cvelist
EUVD	EUVD-2026-64723	24 Aug 202604:30	–	euvd
Positive Technologies	PT-2026-79823	24 Aug 202600:00	–	ptsecurity

Source	Link
github	www.github.com/Leousum/VulnPoC/blob/main/Piwigo%2016.3.0/reflected_XSS.md
github	www.github.com/Piwigo/Piwigo/
vuldb	www.vuldb.com/cve/CVE-2026-78187
vuldb	www.vuldb.com/vuln/394569
vuldb	www.vuldb.com/vuln/394569/cti
github	www.github.com/Piwigo/Piwigo/security/advisories/GHSA-rr39-mf4j-6594
vuldb	www.vuldb.com/submit/885228
github	www.github.com/Piwigo/Piwigo/commit/5277a7dee4b8f1a174f1d69e1e2a4e1c82a3fc9e
github	www.github.com/Piwigo/Piwigo/releases/tag/16.4.0

24 Aug 2026 05:16Current

CVSS 42.3

CVSS 22.6

CVSS 3.13.1