CVE-2020-22148

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

PT-2021-10728

Name of the Vulnerable Software and Affected Versions Piwigo version 2.10.1 Description A stored cross site scripting XSS issue in the "/admin.php?page=tags" endpoint allows attackers to execute arbitrary web scripts or HTML. This could potentially lead to unauthorized actions on the affected...

CVE-2020-22148: Improper Neutralization of Input During Web Page Generation

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

Sql injection

Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator...