CVE-2024-46333

creationtimestamp| type| source ---|---|--- 2024-09-27 18:24:17+00:00| seen| https://t.me/cvedetector/6540 2026-05-23 19:28:55+00:00| seen| https://bsky.app/profile/gltch.io/post/3mmk6nxrcuw2x...

CVE-2024-46333

An authenticated cross-site scripting (XSS) vulnerability exists in Piwigo v14.5.0 due to improper neutralization of input during web page generation. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the Album Name parameter within the Add Album function. No...