Piwigo < 14.1.0 XSS Vulnerability

Piwigo is prone to a cross-site scripting XSS vulnerability in the Admin Tools plug-in component. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

CVE-2023-51790

creationtimestamp| type| source ---|---|--- 2024-01-12 14:27:05+00:00| seen| https://t.me/ctinow/167266 2024-01-16 04:45:06+00:00| seen| https://t.me/arpsyndicate/2825 2024-02-02 15:36:32+00:00| seen| https://t.me/ctinow/178123...

CVE-2023-51790

Cross Site Scripting vulnerability in piwigo v.14.0.0 allows a remote attacker to obtain sensitive information via the lang parameter in the Admin Tools plug-in component...

CVE-2023-51790

CVE-2023-51790 affects piwigo v14.0.0, specifically the Admin Tools plug-in’s lang parameter, which is exposed to enable a cross-site scripting (XSS) vulnerability. The connected sources consistently describe an XSS that could allow a remote attacker to obtain sensitive information. The primary d...