PT-2024-32071

Name of the Vulnerable Software and Affected Versions Piwigo version 14.5.0 Description A cross-site scripting XSS issue in the /admin.php?page=photo component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field. This enables attacke...

CVE-2024-46606: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component /admin.php?page=photo of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field...

CVE-2024-46606

A cross-site scripting XSS vulnerability in the component /admin.php?page=photo of Piwigo v14.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description field...