CVE-2024-46333

creationtimestamp| type| source ---|---|--- 2024-09-27 18:24:17+00:00| seen| https://t.me/cvedetector/6540 2026-05-23 19:28:55+00:00| seen| https://bsky.app/profile/gltch.io/post/3mmk6nxrcuw2x...

CVE-2024-46333

CVE-2024-46333: An authenticated XSS in Piwigo v14.5.0 allows injection of arbitrary web scripts/HTML via the Album Name field in Add Album. Affected component is the Album management flow; underlying cause is not detailed in the provided documents. Practical impact is limited to script execution...