Piwigo <= 2.10.2 Multiple XSS Vulnerabilities

Piwigo is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2020-22150

creationtimestamp| type| source ---|---|--- 2021-07-21 20:35:06+00:00| seen| https://t.me/cibsecurity/26355...

CVE-2020-22150

CVE-2020-22150 describes a cross-site scripting (XSS) vulnerability in Piwigo 2.10.1, specifically in /admin.php?page=permalinks, allowing execution of arbitrary web scripts or HTML. Connected sources corroborate XSS in Piwigo and indicate variants affecting Piwigo up to 2.10.2 (OpenVAS listing)....